medium6.1
CVE-2025-25582
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.xml.
Impact
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.xml.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| R1bbit | Yimioa | before 2024-07-04 |