Threats tagged 'ghsa-xh95-44r3-wvvp'

A SQL injection vulnerability exists in Jinher OA C6 in the file /C6/JHSoft.Web.Project/OfficeReadOnly/ProjectAfficheManage.aspx via manipulation of the ProjID argument. The vulnerability allows remote attackers to execute unauthorized SQL commands. Exploit code is publicly available. The vendor has not responded to disclosure requests and no patch information is available. The CVSS score is 7.3, indicating high severity.