Description
ywoa是中国bestfeng个人开发者的一个 OA 协同办公系统。 ywoa 2024.07.03版本及之前版本存在注入漏洞，该漏洞源于com/cloudweb/oa/mapper/xml/UserMapper.xml的listNameBySql函数包含一个SQL注入漏洞。
ywoa 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2025-1224
https://github.com/cloudwebsoft/ywoa/issues
https://vuldb.com/?id.295217
https://nvd.nist.gov/vuln/detail/CVE-2025-1227
https://www.pa55w0rd.online/yyoa/
https://www.cnblogs.com/dxp5201/articles/16168204.html
http://zone.ci/vulns/ys/356271.html
https://security.zone.ci/aliyun/ali_nvd/51599.html
https://avd.aliyun.com/detail?id=AVD-2022-38808