medium6.1
CVE-2025-25580
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml/UserMapper.xml.
Impact
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml/UserMapper.xml.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| R1bbit | Yimioa | before 2024.07.04 |