Vendor
An authenticated SQL injection vulnerability in YS-infoware BA-Workflow allows remote attackers to execute arbitrary database commands, compromising data integrity and confidentiality.