Threats tagged 'ghsa-vg39-86qf-m976'

Jinher OA 1.0 contains a SQL injection vulnerability in an unknown function within the /C6/JHSoft.Web.PlanSummarize/UserSel.aspx file. The vulnerability is triggered by manipulation of the DeptIDList argument and can be exploited remotely without authentication. Exploit code has been published publicly. The vendor was notified but has not responded or issued a fix.