Description
金和OA /C6/Jhsoft.Web.departments/GetTreeDate.aspx 接口存在SQL注入漏洞。
金和OA /C6/Jhsoft.Web.departments/GetTreeDate.aspx SQL 注入漏洞（CVE-2025-10090）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2025-10090
https://www.knowsafe.com/ti/info/0/1000514
https://www.cve.org/CVERecord?id=CVE-2025-10090
https://www.sentinelone.com/vulnerability-database/cve-2025-10090/
https://cve.circl.lu/vuln/cve-2025-10090
https://github.com/advisories/GHSA-4q35-hvg6-q7wv
https://s4e.io/tools/jinher-oa-sqli-cve-2025-10090
https://blog.csdn.net/m0_50125527/article/details/151395633