CVE-2026-2963
SQL Injection in Jinher OA C6 Allows Remote Exploitation
Publication date: 2026-02-23
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| beijing_jinhe_network_technology_co_ltd | jinher_oa_c6 | to 20260210 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-74 | The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. |
| CWE-89 | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-2963 is a SQL injection vulnerability found in Jinher OA C6 software versions up to 20260210. It exists in the file /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx, specifically involving the manipulation of the id and offsnum parameters.
Improper handling of these parameters allows an attacker to inject malicious SQL code, which can modify the intended SQL commands executed by the system.
This vulnerability is classified under CWE-89, meaning the software constructs SQL commands using externally influenced input without properly neutralizing special characters.
The attack can be initiated remotely without authentication, and exploitation is considered easy. A public proof-of-concept exploit is available.
How can this vulnerability impact me? :
Exploiting this vulnerability allows attackers to execute arbitrary SQL commands on the backend database.
This can lead to unauthorized access to sensitive data, modification or deletion of data, and potentially disruption of system availability.
The impact affects the confidentiality, integrity, and availability of the affected system.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
[{'type': 'paragraph', 'content': 'This vulnerability can be detected by identifying if your system is running Jinher OA C6 versions up to 20260210 and if the vulnerable file /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx is accessible.'}, {'type': 'paragraph', 'content': 'One method to detect potentially vulnerable targets is by using Google dorking with the query: inurl:C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx'}, {'type': 'paragraph', 'content': "To test for SQL injection on the parameters 'id' or 'offsnum', you can use tools like curl or sqlmap to send crafted requests and observe if the backend database responds with errors or unexpected data."}, {'type': 'list_item', 'content': 'Example curl command to test SQL injection on the \'id\' parameter:\ncurl -v "http://target/C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx?id=1\' OR \'1\'=\'1"'}, {'type': 'list_item', 'content': 'Using sqlmap to automate detection:\nsqlmap -u "http://target/C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx?id=1" --batch'}] [1]
What immediate steps should I take to mitigate this vulnerability?
[{'type': 'paragraph', 'content': 'The immediate recommended step to mitigate this vulnerability is to apply the appropriate patch provided by the vendor for Jinher OA C6 versions up to 20260210.'}, {'type': 'paragraph', 'content': 'Since the vendor did not respond to notifications, if a patch is not available, consider restricting access to the vulnerable endpoint /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx via network controls such as firewalls or web application firewalls (WAF) to prevent remote exploitation.'}, {'type': 'paragraph', 'content': "Additionally, monitor logs for suspicious activity targeting the 'id' or 'offsnum' parameters and implement input validation or parameterized queries if you have control over the application source code."}] [1]