ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.
- https://github.com/cloudwebsoft/ywoa/issues/26
No PoCs found on GitHub currently.