Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.
- https://github.com/cloudwebsoft/ywoa/issues/25
No PoCs found on GitHub currently.