A SQL Injection vulnerability exists in BA-Workflow developed by YS-infoware. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents. The vulnerability has a CVSS score of 8.7, indicating high severity. Defenders should assess exposure and implement compensating controls to prevent exploitation. The impact of this vulnerability requires verificatio [truncated]
A SQL Injection vulnerability exists in BA-Workflow developed by YS-infoware. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents. This vulnerability has a CVSS score of 8.7 and is classified as HIGH severity. The vulnerability allows attackers to manipulate database content, potentially leading to data breaches and system compromise. Defenders [truncated]