ywoa

CVEs (3)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-36606	ywoa ywoa	Cri	0.64	9.8	0.01	Aug 19, 2022	Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.
CVE-2022-36605	yimioa yimioa	Cri	0.64	9.8	0.01	Aug 19, 2022	Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.
CVE-2022-38808	ywoa ywoa	Hig	0.57	8.8	0.01	Sep 16, 2022	ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.

CVE-2022-36606CriAug 19, 2022
ywoa
ywoa
risk 0.64cvss 9.8epss 0.01
Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.
CVE-2022-36605CriAug 19, 2022
yimioa
yimioa
risk 0.64cvss 9.8epss 0.01
Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.
CVE-2022-38808HigSep 16, 2022
ywoa
ywoa
risk 0.57cvss 8.8epss 0.01
ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.