81 matches found
CVE-2024-33864: Server-Side Request Forgery (SSRF)
An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript...
linqi 安全漏洞
linqi is a process digitization program from linqi, Inc. A security vulnerability exists in linqi versions prior to 1.4.0.1 that stems from the presence of server-side request forgery...
linqi 安全漏洞
linqi is a process digitization program from linqi. A security vulnerability exists in linqi versions prior to 1.4.0.1 that stems from the presence of a cross-site scripting vulnerability...
CVE-2024-33863: Improper Control of Filename for Include/Require Statement in PHP Program
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion...
linqi 安全漏洞
linqi is a process digitization program from linqi, Inc. A security vulnerability exists in linqi versions prior to 1.4.0.1 that stems from the presence of a local file inclusion issue...
PT-2024-25519 · Linqi · Linqi
Name of the Vulnerable Software and Affected Versions: linqi versions prior to 1.4.0.1 Description: An issue in linqi allows for Server-Side Request Forgery SSRF via Document template generation. This can be achieved through remote images in process creation, file inclusion, and PDF document...
PT-2024-25520 · Linqi · Linqi
Name of the Vulnerable Software and Affected Versions: linqi versions prior to 1.4.0.1 Description: An issue was discovered that leads to an NTLM hash leak. This occurs via the "api/Cdn/GetFile" and "api/DocumentTemplate/GUID" endpoints. Recommendations: For versions prior to 1.4.0.1, update to...
PT-2024-25522 · Linqi · Linqi
Name of the Vulnerable Software and Affected Versions: linqi versions prior to 1.4.0.1 Description: An issue was discovered in linqi where there is a hardcoded password salt. Recommendations: For versions prior to 1.4.0.1, update to version 1.4.0.1 or later to resolve the issue...
PT-2024-25518 · Linqi · Linqi
Name of the Vulnerable Software and Affected Versions: linqi versions prior to 1.4.0.1 Description: An issue was discovered in linqi, allowing local file inclusion via the /api/Cdn/GetFile API endpoint. Recommendations: For versions prior to 1.4.0.1, update to version 1.4.0.1 or later to resolve...
linqi 安全漏洞
linqi is a process digitization program from linqi, Inc. A security vulnerability exists in linqi versions prior to 1.4.0.1 that stems from the presence of a hash leak...
linqi 安全漏洞
linqi is a process digitization program from linqi. A security vulnerability exists in linqi versions prior to 1.4.0.1 that stems from the presence of LDAP injection...
PT-2024-25523 · Linqi · Linqi
Name of the Vulnerable Software and Affected Versions: linqi versions prior to 1.4.0.1 Description: An issue was discovered in the software, specifically an LDAP injection. Recommendations: For versions prior to 1.4.0.1, update to version 1.4.0.1 or later to resolve the issue...
CVE-2024-33866: Improper Neutralization of Input During Web Page Generation
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...
CVE-2024-33865: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/GUID endpoints...
CVE-2024-33868: Improper Neutralization of Special Elements used in an LDAP Query
An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...
CVE-2024-33867: Use of Hard-coded Password
An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt...
Unauthorized Access Vulnerability in Website Building System of Hangzhou LinQi Network Technology Co.
Hangzhou Linqi Network Technology Co., Ltd. is a foreign trade information company, focusing on China's export enterprises foreign trade network integrated marketing and other projects. There is an unauthorized access vulnerability in the website building system of Hangzhou LinQi Network Technolo...
CVE-2024-33865
An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/GUID endpoints...
CVE-2024-33864
An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript...