Vulnerabilities

TI-2022-18298 CVE-2022-38808 · GHSA-vm4p-5p2v-2x96

ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.

MEDIUM 40

ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00911 Published 2022-09-16 No fix listed CWE-89

TI-2022-16907 CVE-2022-36606 · GHSA-3qmv-v22h-rc37

MEDIUM 44

Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01087 Published 2022-08-19 No fix listed CWE-89

TI-2022-16906 CVE-2022-36605 · GHSA-3p6r-56fp-3cwc

MEDIUM 44

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00839 Published 2022-08-19 No fix listed CWE-89