Advisories · Technology
ywoa.
Every CVE that names ywoa among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
ywoa AddressDao.xml selectList sql injection
- ywoa
- Other injection
- SQL injection
- CVSS 6.9 Medium
ywoa setup.jsp improper authorization
- ywoa
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
ywoa WXCallBack Interface XMLParse.java extract xml external entity reference
- ywoa
- XML external entities (XXE)
- CWE-610
- CVSS 5.3 Medium
ywoa UserMapper.xml listNameBySql sql injection
- ywoa
- Other injection
- SQL injection
- CVSS 5.3 Medium
ywoa OaNoticeMapper.xml selectNoticeList sql injection
- ywoa
- Other injection
- SQL injection