Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Ywoa
(Yimihome)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 3 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-09-16 | CVE-2022-38808 | ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface. | Ywoa | 8.8 | ||
| 2022-08-19 | CVE-2022-36605 | Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter. | Ywoa | 9.8 | ||
| 2022-08-19 | CVE-2022-36606 | Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database. | Ywoa | 9.8 |