CVE:CVE-2022-3467
CNNVD:CNNVD-202210-718
Beijing Jiusi Collaborative Software Office System（北京九思协同软件办公系统）是中国北京九思协同软件（Beijing Jiusi Collaborative Software）公司的一个 OA 办公系统。
Beijing Jiusi Collaborative Software Office System OA 存在SQL注入漏洞，该漏洞源于jsoa/hntdCustomDesktopActionContent 的未知功能，攻击者利用该漏洞可以通过参数inforid发起SQL注入攻击。
solution:Upgrade jiusi jiusi_oa to a higher version than -