high
advisory
Jinher OA C6: SQL injection in ProjectAfficheManage.aspx (CVE-2026-124331)
A SQL injection vulnerability exists in Jinher OA C6 within the ProjectAfficheManage.aspx file.
CVE search metadata
CVE search record: CVE-2026-124331. Severity: high. CVSS: 7.3. KEV: no. Product: OA C6. Brief: Jinher OA C6: SQL injection in ProjectAfficheManage.aspx (CVE-2026-124331). Brief link: https://feed.craftedsignal.io/briefs/2026-11-jinher-oa-c6-sql-injection/
Triage facts
Revision 1- Applicability
- OA C6
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 8, 19:33 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability was identified in Jinher OA C6 in the file /C6/JHSoft.Web.Project/OfficeReadOnly/ProjectAfficheManage.aspx. Manipulation of the ProjID argument leads to SQL injection. The attack can be launched remotely. Public exploit code is available. The vendor was contacted but did not respond.