Description
A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jinher | OA | 1.0 | — |
References
- VDB-321876 | Jinher OA GetTreeDate.aspx sql injection vdb-entry technical-description
- VDB-321876 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #637413 | Jinhe OA V1.0 SQL Injection third-party-advisory
- https://github.com/1276486/CVE/issues/1 exploit issue-tracking