| タイトル | Jinher OA V1.0 SQL Injection |
|---|
| 説明 | A critical SQL injection vulnerability has been discovered in the PlanGiveOut.aspx component of Jinher OA. The affected parameter is httpOID, which is used to retrieve or manipulate plan-related data. Due to improper sanitization of user-supplied input before incorporating it into SQL queries, an attacker can inject arbitrary SQL commands into the backend database. This flaw is especially dangerous because it does not require any form of authentication — even unauthenticated remote attackers can exploit it by sending specially crafted HTTP requests to the vulnerable endpoint. |
|---|
| ソース | ⚠️ https://github.com/weini587/CVE/issues/1 |
|---|
| ユーザー | weini123 (UID 98786) |
|---|
| 送信 | 2026年06月05日 16:10 (1 月 ago) |
|---|
| モデレーション | 2026年07月12日 13:08 (1 month later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 377846 [Jinher OA 1.0 PlanGiveOut.aspx httpOID SQLインジェクション] |
|---|
| ポイント | 20 |
|---|