Approved changes feed: RSS · Atom
cpe:2.3:a:jinher:jinher_oa:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Jinher (07ee4682-14aa-5889-b26b-8e06ed2ac7cf) |
|---|---|
| Product | Jinher Oa (0d9de4dc-509b-50b8-9c0e-d92ddb0886a7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9931 |
vulnerable | 2026-06-08 07:47:10.296246 |
Jinher OA POST Request login!changePassWord.action cross site scripting
MEDIUM (4.3)
A vulnerability was detected in Jinher OA 1.0. Affected is an unknown function of the file /jc6/platform/sys/login!changePassWord.action of the component POST Request Handler. The manipulation of the argument Account results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.
Published: 2025-09-03T22:02:07.472Z
Updated: 2025-09-04T19:59:48.284Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9669 |
vulnerable | 2026-06-08 07:47:09.504376 |
Jinher OA GetTreeDate.aspx sql injection
HIGH (7.3)
A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Published: 2025-08-29T19:02:06.121Z
Updated: 2025-08-29T19:24:04.135Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7523 |
vulnerable | 2026-06-08 07:45:17.599536 |
Jinher OA DelTemp.aspx xml external entity reference
HIGH (7.3)
A vulnerability was found in Jinher OA 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /c6/Jhsoft.Web.message/ToolBar/DelTemp.aspx. The manipulation leads to xml external entity reference. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-13T07:02:05.374Z
Updated: 2025-07-15T19:54:19.426Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.