CVE-2025-10090 – Jinher OA GetTreeDate.aspx sql injection

CVE ID : CVE-2025-10090

Published : Sept. 8, 2025, 10:15 a.m. | 37 minutes ago

Description : A flaw has been found in Jinher OA up to 1.2. The impacted element is an unknown function of the file /C6/Jhsoft.Web.departments/GetTreeDate.aspx. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…