Approved changes feed: RSS · Atom

cpe:2.3:a:jinher:oa_c6:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJinher (07ee4682-14aa-5889-b26b-8e06ed2ac7cf)
ProductOa C6 (b3f4df09-36c3-5e09-a72c-9bb48f928137)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2963 vulnerable 2026-06-08 07:55:17.897967 Jinher OA C6 OfficeSupplyTypeRight.aspx sql injection
MEDIUM (6.3)
A vulnerability was determined in Jinher OA C6 up to 20260210. This issue affects some unknown processing of the file /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx. This manipulation of the argument id/offsnum causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. It is suggested to install a patch to address this issue. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-02-23T00:32:13.932Z
Updated: 2026-02-23T13:50:26.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2587 vulnerable 2026-06-08 07:16:57.605547 Jinher OA C6 IncentivePlanFulfillAppprove.aspx sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in Jinher OA C6 1.0. This affects an unknown part of the file IncentivePlanFulfillAppprove.aspx. The manipulation of the argument httpOID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-21T12:00:08.867Z
Updated: 2025-03-21T17:26:41.533Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.