| 제목 | Jinhe OA V1.0 SQL Injection |
|---|
| 설명 | A severe SQL injection vulnerability was discovered in the UserSel.aspx component during testing of Jinhe OA. The "DeptIDList" parameter is vulnerable to SQL injection attacks, enabling unauthorized attackers to execute arbitrary SQL queries on the backend database, which could potentially lead to remote code execution under certain conditions.
|
|---|
| 원천 | ⚠️ https://github.com/zzlln/cvecve/issues/1 |
|---|
| 사용자 | ZLNZLN (UID 97174) |
|---|
| 제출 | 2026. 04. 08. AM 08:59 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 05. 02. AM 10:07 (24 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 360818 [Jinher OA 1.0 UserSel.aspx DeptIDList SQL 주입] |
|---|
| 포인트들 | 19 |
|---|