CVE-2024-48068

A cross-site scripting XSS vulnerability in Shenzhen Landray Software Co.,LTD Landray EKP v16 and earlier allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Landray EKP 路径遍历漏洞

Landray EKP is an office automation solution from China's Landray Corporation that enables companies to easily model and manage their business. A path traversal vulnerability exists in Landray EKP V16.0 and earlier versions, which stems from the parameter directoryPath in the file...

CVE-2024-48068

CVE-2024-48068 concerns a cross-site scripting (XSS) vulnerability in Shenzhen Landray Software Co., LTD Landray EKP v16 and earlier. The issue allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. Affected product: Landray EKP v16 and earlier (Office automation solut...

CVE-2024-48068

A cross-site scripting XSS vulnerability in Shenzhen Landray Software Co.,LTD Landray EKP v16 and earlier allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Landray EKP 安全漏洞

Landray EKP is an office automation solution from China-based Landray that enables companies to easily model and manage. A security vulnerability exists in Landray EKP V16 and prior versions, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to...

PT-2024-16847 · Landray · Landray Ekp

Name of the Vulnerable Software and Affected Versions: Landray EKP versions up to 16.0 Description: A critical issue was found in the function delPreviewFile of the file "/sys/ui/sys ui component/sysUiComponent.do?method=delPreviewFile". The manipulation of the directoryPath argument leads to pat...

CVE-2022-34924

CVE-2022-34924 affects Lanling OA Landray Office Automation (OA). The vulnerability is an arbitrary file read located in the component /sys/ui/extend/varkind/custom.jsp, as described across multiple sources (NVD/Red Hat/CVE list). The available documents do not specify a patch version or remediat...

CVE-2021-3159

A stored cross site scripting XSS vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG, SHTML, or MHT file...

CVE-2021-3159

A stored cross site scripting XSS vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG, SHTML, or MHT file...

Cross site scripting

A stored cross site scripting XSS vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG, SHTML, or MHT file...

CVE-2021-3159

CVE-2021-3159 is a stored XSS vulnerability in Landray EKP v12.0.9.R.20160325, specifically in the /sys/attachment/uploaderServlet component. A crafted SVG, SHTML, or MHT file can cause the application to execute arbitrary web scripts or HTML. Documented impacts in the provided sources align with...

CVE-2021-3159

A stored cross site scripting XSS vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG, SHTML, or MHT file...

Landray EKP 跨站脚本漏洞

Landray EKP is an office automation solution that enables companies to easily model and manage... A cross-site scripting vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 could allow an attacker to execute arbitrary web script or HTML via a crafted...