CVE-2026-124331 | Jinher OA C6 ProjectAfficheManage.aspx ProjID sql injection

November 7, 2026 Yanac

A vulnerability categorized as critical has been discovered in Jinher OA C6. This impacts an unknown function of the file /C6/JHSoft.Web.Project/OfficeReadOnly/ProjectAfficheManage.aspx. Such manipulation of the argument ProjID leads to sql injection.

This vulnerability is referenced as CVE-2026-124331. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More