Skip to content
OpenAdvisories

Product · Jinher

OA

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-11412

    Jinher OA GetFormSn.aspx sql injection

    A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx. Executing a manipulation of the argument queryID can lead to sql injection. The attack may be performed from rem…

    Jinher OA
  • Medium 6.3
    CVE-2025-11035

    Jinher OA text xml external entity reference

    A vulnerability was determined in Jinher OA 2.0. The impacted element is an unknown function of the file /c6/Jhsoft.Web.module/ToolBar/ManageWord.aspx/?text=GetUrl&style=1. This manipulation causes xml external entity reference. The attack can be initiated re…

    Jinher OA
  • Medium 4.3
    CVE-2025-9931

    Jinher OA POST Request login!changePassWord.action cross site scripting

    A vulnerability was detected in Jinher OA 1.0. Affected is an unknown function of the file /jc6/platform/sys/login!changePassWord.action of the component POST Request Handler. The manipulation of the argument Account results in cross site scripting. The attac…

    Jinher OA