Vulnerabilities > Yimihome > Ywoa > 6.1

DATE CVE VULNERABILITY TITLE RISK
2025-02-12 CVE-2025-1226 Incorrect Privilege Assignment vulnerability in Yimihome Ywoa 6.1
A vulnerability was found in ywoa up to 2024.07.03.
network
low complexity
yimihome CWE-266
critical
9.8
2025-02-12 CVE-2025-1227 SQL Injection vulnerability in Yimihome Ywoa 6.1
A vulnerability was found in ywoa up to 2024.07.03.
network
low complexity
yimihome CWE-89
8.8
2025-02-12 CVE-2025-1224 SQL Injection vulnerability in Yimihome Ywoa 6.1
A vulnerability classified as critical was found in ywoa up to 2024.07.03.
network
low complexity
yimihome CWE-89
8.8
2025-02-12 CVE-2025-1225 XXE vulnerability in Yimihome Ywoa 6.1
A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03.
network
low complexity
yimihome CWE-611
6.3
2025-02-12 CVE-2025-1216 SQL Injection vulnerability in Yimihome Ywoa 6.1
A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03.
network
low complexity
yimihome CWE-89
8.8
2022-09-16 CVE-2022-38808 SQL Injection vulnerability in Yimihome Ywoa 6.1
ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.
network
low complexity
yimihome CWE-89
8.8
2022-08-19 CVE-2022-36605 SQL Injection vulnerability in Yimihome Ywoa 6.1
Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.
network
low complexity
yimihome CWE-89
critical
9.8