Description
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| YS-infoware | BA-Workflow | < 3.6 | 3.6 |