jinher oa vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 5.5CVE-2026-124331EPSS 0.3%2026-11-08

   A vulnerability was identified in Jinher OA C6. This impacts an unknown function of the file /C6/JHSoft.Web.Project/OfficeReadOnly/ProjectAfficheManage.aspx. Such manipulation of the argument ProjID leads to sql injection. It is possible t…

2. 5.5CVE-2026-19905EPSS 0.4%2026-08-15

   A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendance_out_approve.aspx. This manipulation of the argument httpOID causes sql injection. It is possible to initia…

3. 5.5CVE-2026-15517EPSS 0.4%2026-07-13

   A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/PlanGiveOut.aspx. This manipulation of the argument httpOID causes sql injection. Remote exploitation of the attac…

4. 5.5CVE-2026-11435EPSS 0.3%2026-06-06

   A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sql injection. The attack may be launched remotely. The explo…

5. 2.1CVE-2026-11412EPSS 0.2%2026-06-06

   A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx. Executing a manipulation of the argument queryID can lead to sql injection. The attack may b…

6. 5.5CVE-2026-7670EPSS 0.3%2026-05-02

   A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/UserSel.aspx. This manipulation of the argument DeptIDList causes sql injection. The attack is possible to be carr…