Vendor

Jinher

1 brief RSS

Jinher OA 1.0 SQL Injection Vulnerability (CVE-2026-7670)

Jinher OA 1.0 is vulnerable to remote SQL injection via the DeptIDList parameter in the /C6/JHSoft.Web.PlanSummarize/UserSel.aspx file, potentially allowing attackers to execute arbitrary SQL queries.

OA 1.0 sql-injection cve-2026-7670 web-application

2r 1t 1c 1d ago