Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise FSCM Component (CNVD-2017-31847)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise FSCM is one of the financial and supply chain management components. An...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise FSCM (CNVD-2017-20277)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise FSCM is one of the financial and supply chain management components. A...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise FSCM

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise FSCM is one of the financial and supply chain management components. A...

SQL Injection Vulnerability in UFIDA Software NC-IUFO System

UFIDA NC-IUFO system is a financial management software. The UFIDA NC-IUFO system suffers from a SQL injection vulnerability that can be exploited by an attacker to gain access to website database information...

用友GRP-U8财务管理软件/servlet/FileUpload接口任意文件上传漏洞

No description provided by source...

用友 GRP-U8财务管理软件 /UpdateNoticeRtnInfoInc?info_id=1&urid=2 sql注入

No description provided by source...

用友GRP-U8 政府财务管理系统 IMRoleServlet,IMUnitServlet 两处SQL注入漏洞

No description provided by source...

kingdee EAS系统 V7.5 /plt_iservice/service/findFavList.action 远程命令执行漏洞

0x01 框架介绍 全球第一款融合TOGAF标准SOA架构的企业管理软件，金蝶EAS面向亟待跨越 成长鸿沟的大中型企业，以"创造无边界信息流"为产品设计理念， 支持云计算、SOA 和动态流程管理的整合技术平台，全面覆盖企业战略管理、风险管理、集团财务管 理、战略人力资源管理、跨组织供应链、多工厂制造和外部产业链等管理领域，突破 流程制造、项目制造、供应商协作、客户协作等复杂制造和产业链协同应用，实现业 务的全面管理，支持管理创新与发展，帮助企业敏捷应对日益复杂的商业环境变化， 提升整体运作效率，实现效益最大化。 官方主页：www.kingdee.com 0x02 漏洞细节...

SQL injection vulnerability in the id parameter in Ticketmaster ERP web-based ticketing system/Sales/meb_his.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

用友某重要系统两处高危SQL注射

简要描述： 用友某重要系统两处高危SQL注射 详细说明： 该系统为用友GRP-U8 财务管理软件，涉及到非常多敏感的信息 /IMLoginServlet?uid=1&pwd=1 /persionTreeServlet?bmdm=1 SQL注入1 /IMLoginServlet?uid=1&pwd=1 sqlmap.py -u "http://61.139.105.105:8008/IMLoginServlet?uid=1&pwd=1" SQL注入2 sqlmap.py -u "http://61.139.105.105:8008/persionTreeServlet?bmdm=1"...

Nasty Oracle Vulnerability Leaves Researcher 'Flabbergasted'

Oracle on Tuesday will release a huge number of security fixes as part of its quarterly critical patch update, and one of them is a patch for a vulnerability that a well-known security researcher said looks a lot like a back door but was likely just a terrible mistake. The flaw is found in Oracle...

Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution

No description provided by source...

CVE-2012-1714

Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote attackers to execute arbitrary code via unknown vectors...

Buffer overflow

Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2012-1714

CVE-2012-1714 affects Oracle Hyperion Financial Management (HFM) versions 11.1.1.4 and 11.1.2.1.104, via a vulnerability in the TList 6 ActiveX control. The issue permits remote code execution through unknown vectors; no concrete exploit details or impact vector are provided beyond this, and no r...

CVE-2012-1714

Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote attackers to execute arbitrary code via unknown vectors...

Oracle Hyperion Financial Management ActiveX Heap Overflow

Added: 11/21/2011 BID: 50565 OSVDB: 76913 Background Oracle Hyperion Financial Management is a web-based financial consolidation, reporting and analysis solution. Problem Hyperion Financial Management webapp installs an ActiveX control on the target system. This control is marked as safe for...

Oracle Hyperion Financial Management ActiveX Heap Overflow

Added: 11/21/2011 BID: 50565 OSVDB: 76913 Background Oracle Hyperion Financial Management is a web-based financial consolidation, reporting and analysis solution. Problem Hyperion Financial Management webapp installs an ActiveX control on the target system. This control is marked as safe for...

Oracle Hyperion Financial Management ActiveX Heap Overflow

Added: 11/21/2011 BID: 50565 OSVDB: 76913 Background Oracle Hyperion Financial Management is a web-based financial consolidation, reporting and analysis solution. Problem Hyperion Financial Management webapp installs an ActiveX control on the target system. This control is marked as safe for...

Oracle Hyperion Financial Management ActiveX Heap Overflow

Added: 11/21/2011 BID: 50565 OSVDB: 76913 Background Oracle Hyperion Financial Management is a web-based financial consolidation, reporting and analysis solution. Problem Hyperion Financial Management webapp installs an ActiveX control on the target system. This control is marked as safe for...