SQL Injection

Every one of the 28 is a mark on the map. Named now: 1 to 26, most at risk first.

1. SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attackers can use the vulnerabilities to obtain sensitive databa…CVE-2021-41746Yonyou · 1.3% likely

   CWE-89

2. Yonyou U8 CRM SQL Injection via fillbacksettingedit.phpCVE-2024-58385Yonyou · CVSS 9.8 · 0.7% likely

   CWE-89

3. YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method.CVE-2023-51927Yonyou · CVSS 9.8 · 0.6% likely

   CWE-89

4. Yonyou KSOA HTTP GET Parameter edit_folder.jsp sql injectionCVE-2026-1132Yonyou · CVSS 7.3 · 0.6% likely

   CWE-89

5. Yonyou KSOA HTTP GET Parameter save_catalog.jsp sql injectionCVE-2026-1131Yonyou · CVSS 7.3 · 0.6% likely

   CWE-89

6. Yonyou KSOA HTTP GET Parameter folder.jsp sql injectionCVE-2026-1133Yonyou · CVSS 7.3 · 0.5% likely

   CWE-89

7. Yonyou KSOA HTTP GET Parameter worksadd_plan.jsp sql injectionCVE-2026-1130Yonyou · CVSS 7.3 · 0.5% likely

   CWE-89

8. Yonyou KSOA HTTP GET Parameter worksadd.jsp sql injectionCVE-2026-1129Yonyou · CVSS 7.3 · 0.5% likely

   CWE-89

9. Yonyou KSOA HTTP GET Parameter del_user.jsp sql injectionCVE-2025-15425Yonyou · CVSS 7.3 · 0.5% likely

   CWE-89

10. Yonyou KSOA HTTP GET Parameter del_workplan.jsp sql injectionCVE-2026-1121Yonyou · CVSS 7.3 · 0.5% likely

    CWE-89

11. Yonyou KSOA HTTP GET Parameter del_work.jsp sql injectionCVE-2026-1120Yonyou · CVSS 7.3 · 0.5% likely

    CWE-89

12. Seeyon A6 OA Unauthenticated SQL Injection via downloadAtt.jspCVE-2015-20122Yonyou · CVSS 7.5 · 0.5% likely

    CWE-89

13. Yonyou KSOA HTTP GET Parameter agent_worksdel.jsp sql injectionCVE-2025-15424Yonyou · CVSS 7.3 · 0.5% likely

    CWE-89

14. Yonyou KSOA HTTP GET Parameter agent_worksadd.jsp sql injectionCVE-2025-15421Yonyou · CVSS 7.3 · 0.5% likely

    CWE-89

15. Yonyou KSOA agent_work_report.jsp sql injectionCVE-2025-15420Yonyou · CVSS 7.3 · 0.5% likely

    CWE-89

16. Yonyou KSOA HTTP GET Parameter work_info.jsp sql injectionCVE-2026-1122Yonyou · CVSS 7.3 · 0.5% likely

    CWE-89

17. Yonyou KSOA HTTP GET Parameter work_report.jsp sql injectionCVE-2026-1124Yonyou · CVSS 7.3 · 0.4% likely

    CWE-89

18. Yonyou KSOA HTTP GET Parameter work_mod.jsp sql injectionCVE-2026-1123Yonyou · CVSS 7.3 · 0.4% likely

    CWE-89

19. Yonyou KSOA work_edit.jsp sql injectionCVE-2025-15436Yonyou · CVSS 7.3 · 0.4% likely

    CWE-89

20. Yonyou KSOA HTTP GET Parameter user_popedom.jsp sql injectionCVE-2026-1179Yonyou · CVSS 7.3 · 0.4% likely

    CWE-89

21. Yonyou KSOA HTTP GET Parameter select.jsp sql injectionCVE-2026-1178Yonyou · CVSS 7.3 · 0.4% likely

    CWE-89

22. Yonyou KSOA HTTP GET Parameter save_folder.jsp sql injectionCVE-2026-1177Yonyou · CVSS 7.3 · 0.4% likely

    CWE-89

23. Yonyou KSOA search_list.jsp sql injectionCVE-2026-94491Yonyou · CVSS 7.3 · 0.4% likely

    CWE-89

24. Yonyou KSOA work_update.jsp sql injectionCVE-2025-15435Yonyou · CVSS 7.3 · 0.4% likely

    CWE-89

25. Yonyou KSOA PrintZPYG.jsp sql injectionCVE-2025-15434Yonyou · CVSS 7.3 · 0.4% likely

    CWE-89

26. SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM pa…CVE-2024-24256Yonyou · CVSS 5.9 · 0.4% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.