Description
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| YS-infoware | BA-Workflow | < v3.6 | v3.6 |