kingdee办公系统的文件/kingdee/portal/portal_info.jsp存在Blind SQL注入漏洞

No description provided by source...

金蝶协作办公系统 /kingdee/tree/tree/rules/get_nodes.jsp 参数 node SQL注射

No description provided by source...

SQL Injection Vulnerability in Panmicro OA Office System

Panavision OA Office System is a coordination office software. Panmicro OA Office System suffers from a SQL injection vulnerability and a lack of filtering of the formName parameter, which can be exploited by an attacker to obtain sensitive information from a website database...

Tongda OA Office System latest version of the file contains a vulnerability

Tongda OA office system 2015 office anywhere 2015 is a domestic office software. The latest version of Tongda OA Office System 2015 suffers from a file inclusion vulnerability that allows attackers to view leaked file information by guessing the file path...

SQL Injection Vulnerability in Creative Yingfeng School Office OA System

Think Yingfeng School Office OA System is a comprehensive school management platform. A SQL injection vulnerability exists in versions 3.99 and earlier of the Creative Yingfeng School Office OA System. It allows attackers to exploit the vulnerability to obtain sensitive database information...

Arbitrary File Upload Vulnerability in Panavision OA System

Panavision OA Office System is a coordination office software. A SQL injection vulnerability exists in Panmicro OA Office System, which can be exploited by an attacker to obtain sensitive information from a website database...

SQL Injection Vulnerability in Panmicro OA Office System Requestid Parameter

Panavision OA Office System is a coordination office software. A SQL injection vulnerability exists in the Panmicro OA Office System requestid parameter, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

Panavision OA Office System has an overstepping vulnerability

Panavision OA Office System is a coordination office software. An override vulnerability exists in Panmicro OA Office System, which allows an attacker to exploit the vulnerability to override and bypass logins and gain access to sensitive information...

Cross-site Scripting Vulnerability in Panavision OA Office System

Panavision OA Office System is a coordination office software. A cross-site scripting vulnerability exists in Panmicro OA Office System, which allows attackers to exploit the vulnerability to perform cross-site scripting attacks...

SQL Injection Vulnerability in OA Network Collaboration Office Platform User Parameters

Zhixiang OA office system is an enterprise office system. A SQL injection vulnerability exists in the user parameter of the mainpage/msglog.aspx page of Zhixiang OA network collaborative office platform. Comprehensive exploitation of the vulnerability allows attackers to utilize commonly used SQL...

SQL Injection Vulnerability in type parameter of Haitian OA System/ZhuanTi/frmmain.asp page

Haitian OA network office system is suitable for enterprises and institutions of the general network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerability exist...

Hardcoded credentials

CreateBossCredentials.jar in Toshiba CHEC before 6.6 build 4014 and 6.7 before build 4329 contains a hardcoded AES key, which allows attackers to discover Back Office System Server BOSS DB2 database credentials by leveraging knowledge of this key in conjunction with bossinfo.pro read access...

CVE-2014-4875

CreateBossCredentials.jar in Toshiba CHEC before 6.6 build 4014 and 6.7 before build 4329 contains a hardcoded AES key, which allows attackers to discover Back Office System Server BOSS DB2 database credentials by leveraging knowledge of this key in conjunction with bossinfo.pro read access...

SQL Injection Vulnerability in Safi OA System

Safe OA system is an office system developed by ASP.NET, and customers involved in medicine, finance, schools, administration and many other units. There is a SQL injection vulnerability in Safi OA system, because the ID parameter of the /ArchiveSend/GetArchiveFlowInfo.aspx page fails to filter t...

用友致远A6协同办公系统存在一处DBA权限SQL注入漏洞

简要描述： RT 详细说明： 漏洞位于：/yyoa/checkWaitdo.jsp文件中 % uName = request.getParameter"userID";//接收参数 // System.out.printlnuName; if uName != "null" Connection con = ConnectionPoolBean.getConnection; //System.out.println"手动检查的结果中有问题的记录:"; boolean l = false; try uID = XiaoxsDbHelper.getIntcon, "select id fro...

MS12-057: Description of the security update for 2007 Office system (MSO): August 14, 2012

Describes the security update for 2007 Office system MSO, that was released on September 14, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-057. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

Security Update for Microsoft Office 2007 System (KB2464635)

A security vulnerability exists in the 2007 Microsoft Office System that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for the 2007 Microsoft Office System (KB2344875)

A security vulnerability exists in the 2007 Microsoft Office System and the Microsoft Office Compatibility Pack that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for the 2007 Microsoft Office System (KB2277947)

A security vulnerability exists in the 2007 Microsoft Office System and the Microsoft Office Compatibility Pack that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

CVE-2010-1263

CVE-2010-1263 is a remote code execution vulnerability in the COM object validation during instantiation in Windows Shell and WordPad. The issue affects Windows XP SP3, Windows XPx64 SP2, Windows Server 2003 SP2 and x64 Itanium editions, Windows Vista SP1/SP2, Windows Server 2008 SP2, and Windows...