CVE-2026-2963
Received Received - Intake
SQL Injection in Jinher OA C6 Allows Remote Exploitation

Publication date: 2026-02-23

Last updated on: 2026-04-29

Assigner: VulDB

Description
A vulnerability was determined in Jinher OA C6 up to 20260210. This issue affects some unknown processing of the file /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx. This manipulation of the argument id/offsnum causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. It is suggested to install a patch to address this issue. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-23
Last Modified
2026-04-29
Generated
2026-06-16
AI Q&A
2026-02-23
EPSS Evaluated
2026-06-14
NVD
CVE-2026-2963
EUVD
EUVD-2026-7597
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
beijing_jinhe_network_technology_co_ltd jinher_oa_c6 to 20260210 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-2963 is a SQL injection vulnerability found in Jinher OA C6 software versions up to 20260210. It exists in the file /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx, specifically involving the manipulation of the id and offsnum parameters.

Improper handling of these parameters allows an attacker to inject malicious SQL code, which can modify the intended SQL commands executed by the system.

This vulnerability is classified under CWE-89, meaning the software constructs SQL commands using externally influenced input without properly neutralizing special characters.

The attack can be initiated remotely without authentication, and exploitation is considered easy. A public proof-of-concept exploit is available.

Impact Analysis

Exploiting this vulnerability allows attackers to execute arbitrary SQL commands on the backend database.

This can lead to unauthorized access to sensitive data, modification or deletion of data, and potentially disruption of system availability.

The impact affects the confidentiality, integrity, and availability of the affected system.

Compliance Impact

I don't know

Detection Guidance

[{'type': 'paragraph', 'content': 'This vulnerability can be detected by identifying if your system is running Jinher OA C6 versions up to 20260210 and if the vulnerable file /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx is accessible.'}, {'type': 'paragraph', 'content': 'One method to detect potentially vulnerable targets is by using Google dorking with the query: inurl:C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx'}, {'type': 'paragraph', 'content': "To test for SQL injection on the parameters 'id' or 'offsnum', you can use tools like curl or sqlmap to send crafted requests and observe if the backend database responds with errors or unexpected data."}, {'type': 'list_item', 'content': 'Example curl command to test SQL injection on the \'id\' parameter:\ncurl -v "http://target/C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx?id=1\' OR \'1\'=\'1"'}, {'type': 'list_item', 'content': 'Using sqlmap to automate detection:\nsqlmap -u "http://target/C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx?id=1" --batch'}] [1]

Mitigation Strategies

[{'type': 'paragraph', 'content': 'The immediate recommended step to mitigate this vulnerability is to apply the appropriate patch provided by the vendor for Jinher OA C6 versions up to 20260210.'}, {'type': 'paragraph', 'content': 'Since the vendor did not respond to notifications, if a patch is not available, consider restricting access to the vulnerable endpoint /C6/Jhsoft.Web.officesupply/OfficeSupplyTypeRight.aspx via network controls such as firewalls or web application firewalls (WAF) to prevent remote exploitation.'}, {'type': 'paragraph', 'content': "Additionally, monitor logs for suspicious activity targeting the 'id' or 'offsnum' parameters and implement input validation or parameterized queries if you have control over the application source code."}] [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-2963. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart