134 matches found
SQL Injection Vulnerability in Panmicro e-cology OA System
Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...
SQL Injection Vulnerability in Trust Call OA System (CNVD-2019-23863)
Xinhuo Co-operation Office System is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhao OA system, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in Ranchi OA System Version 4.2 Order Parameters
Ranzhi OA system is a collaborative office system for small and medium-sized enterprises, which includes functional modules such as customer management crm, sales tracking, daily office and other functions OA office system, bookkeeping software and knowledge management system. A SQL injection...
Reflected Cross-site Scripting Vulnerability in the Commondownloadtype Parameter of Zhiyuan OA System
Zhiyuan A6-m Collaborative Management Software Enterprise Edition is a collaborative management software for small and medium-sized enterprises, Zhiyuan A6-s Collaborative Management Software is a set of collaborative office management software that can help small and micro-organizations of...
Ruvar OA system wf_work_print. aspx the parameter idlist SQL injection vulnerability
No description provided by source...
Sea days OA system MessageInfoDis. asp parameters VOID SQL injection vulnerability
No description provided by source...
SQL Injection Vulnerability in OA System of Tianling Network Technology Co.
Tianling Network Technology Co., Ltd. has developed a business process software tool - myApps Rapid Development Platform, which provides customers with solutions for business process management consulting, planning, design, and training. A SQL injection vulnerability exists in the OA system of...
Arbitrary File Read Vulnerability in Ninth OA System
Ninth OA system is the OA system to install, implement, learn, operate and maintain. An arbitrary file read vulnerability exists in the Jiushi OA system. It allows attackers to exploit the vulnerability to obtain sensitive information. The vulnerable URL is:...
SQL Injection Vulnerability in the getInfo Interface Function of Jiusi OA System
Ninth OA system is the OA system to install, implement, learn, operate and maintain. A SQL injection vulnerability exists in the Ninth OA System. The lack of filtering of the 'getInfo' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the database...
XXE Vulnerability in Ninth OA System
Ninth OA system is the OA system to install, implement, learn, operate and maintain. Ninth OA system DocumentBuilder db = ex.newDocumentBuilder; Document doc = db.parserequest.getInputStream; XXE vulnerability exists. An attacker can read arbitrary files on the server and obtain sensitive...
SQL Injection Vulnerability in the activityId Parameter of Jus OA System
Ninth OA system is the OA system to install, implement, learn, operate and maintain. There is a SQL injection vulnerability in the activityId parameter of the Ninth OA system. When Action is toNextActivity is, the activityId parameter is filtered to directly splice SQL statements, resulting in SQ...
Ruvar OA system WorkPlanAttachDownLoad. aspx parameters sys_file_storage_id SQL injection vulnerability
No description provided by source...
Limits of the OA system /inc/finger/use_finger.php file USER_ID parameter SQL injection vulnerability
No description provided by source...
Ruvar OA system pm_gatt_inc. aspx SQL injection vulnerability
No description provided by source...
JINGLUN OA system /Systems/code/Code_edit. aspx file ChannelId parameter SQL injection vulnerability
No description provided by source...
JINGLUN OA system /Systems/user_priv/manage. aspx file id parameter SQL injection vulnerability
No description provided by source...
Dimensions OA system notes.php parameter nid SQL injection vulnerability
No description provided by source...
Mastery OA system /general/document/index. php/recv/register/turn parameter rid of the SQL injection vulnerability
http://xxx/general/document/index.php/recv/register/turn post:SERVER=&rid=expselectfromselect concat0x7e7e7e,@@version,0x7e7e7e from user limit 0,1x...