IBOS SQL注入漏洞

IBOS is a collaborative office management system. A SQL injection vulnerability exists in IBOS OA version 4.5.5, which originates from a security issue in the function actionEdit in the file ?r=officialdoc/officialdoc/edit in the component Mobile Notification Handler, resulting in an sql injectio...

PT-2023-26246 · Ibos Oa · Ibos Oa

Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue has been found, affecting the function actionEdit of the file ?r=officialdoc/officialdoc/edit in the Mobile Notification Handler component. This issue leads to sql injection. The exploit has...

IBOS Enterprise Collaboration Management Software actionEdit Function has SQL Injection Vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. IBOS Enterprise Collaboration Management Software actionEdit function is vulnerable to SQL injection. Allow attackers to exploit the vulnerability to obtain database sensitive information...