CVE-2026-11412

Name of the Vulnerable Software and Affected Versions Jinher OA C6 (affected versions not specified)

Description A SQL injection flaw exists in the file '/C6/JHSoft.Web.ModuleCount/GetFormSn.aspx'. A remote attacker can exploit this by manipulating the queryID argument. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to interfere with the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.