Landray EIS - SQL Injection Detection

Landray's smart collaboration platform EIS has a very rich collection of modules to meet the needs of organizations and enterprises in knowledge, collaboration, and project management system construction. There is a SQL injection vulnerability in the rptlistreportdefinefield.aspx interface of...

Landray EIS SQL注入漏洞 Detection

Landray EIS 2001 through 2006 contains a SQL injection caused by unsanitized input in Message/fimessagereceiver.aspx?replyid=, letting attackers execute arbitrary SQL commands, exploit requires crafted input. !/usr/bin/env python3 -- coding: utf-8 -- """Landray EIS 2001 through 2006 contains a SQ...

Landray EIS WS_getAllInfos - Information Disclosure Detection

Landray EIS WSgetAllInfos interface suffers from a sensitive information disclosure vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Landray EIS WSgetAllInfos interface suffers from a sensitive information disclosure vulnerability.""" from kittysploit import from...

VulnCheck KEV: CVE-2025-22214

Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...

EUVD-2025-2670

Malicious code in bioql PyPI...

CVE-2025-22214

Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...

CVE-2025-22214

Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...

CVE-2025-22214

CVE-2025-22214 relates to Landray EIS versions 2001–2006 and describes a SQL injection vulnerability in the message handling path at Message/fi_message_receiver.aspx?replyid= . The available connected documents confirm the affected product and the injection vector but do not provide explicit expl...

CVE-2025-22214

Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...

CVE-2025-22214

Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...

CVE-2025-22214: Improper Neutralization of Special Elements used in an SQL Command

Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...