Cross site request forgery (csrf)

A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. This vulnerability affects unknown code of the file /note/index/delete. The manipulation of the argument id leads to cross-site request forgery. The attack can be initiated...

CVE-2023-3029

The CVE-2023-3029 issue affects Guangdong Pythagorean OA Office System (Gougu OA) up to version 4.50.31. A CSRF vulnerability arises from unknown code in /note/index/delete where manipulating the id parameter enables cross-site request forgery. Exploitation is possible remotely and publicized. Co...

Guangdong Pythagorean OA Office System 跨站请求伪造漏洞

Guangdong Pythagorean OA Office System Gougu OA is a practical enterprise office system of China Gouguopen open source gouguopen open source . A cross-site request forgery vulnerability exists in Guangdong Pythagorean OA Office System versions prior to 4.50.31. The vulnerability stems from the...

PT-2023-22646 · Unknown · Guangdong Pythagorean Oa Office System

Name of the Vulnerable Software and Affected Versions: Guangdong Pythagorean OA Office System versions up to 4.50.31 Description: A vulnerability has been found in the Schedule Handler component, where the manipulation of the description argument leads to cross-site scripting. This issue can be...

Guangdong Pythagorean OA Office System 跨站脚本漏洞

Guangdong Pythagorean OA Office System Gougu OA is a practical enterprise office system open source China Gouguopen gouguopen. A cross-site scripting vulnerability exists in Guangdong Pythagorean OA Office System versions prior to 4.50.31. The vulnerability stems from an unknown function in the...

File Upload Vulnerability in Huatian Power Collaboration Office System

Dalian Huatian Software Co., Ltd. is a high-tech enterprise organized in accordance with the international advanced management mode and system, and is a collaborative management software company known for its leading technology. A file upload vulnerability exists in Huatian Power Collaboration...

Beijing Jiusi Collaborative Software Office System SQL注入漏洞

Beijing Jiusi Collaborative Software Office System Beijing Jiusi Collaborative Software Office System is an OA office system from Beijing Jiusi Collaborative Software Beijing Jiusi Collaborative Software, China. Beijing Jiusi Collaborative Software Office System OA suffers from a SQL injection...

Arbitrary File Download Vulnerability in Huatian Power Collaboration Office System

Dalian Huatian Software Co., Ltd. is an OA software and solution provider. An arbitrary file download vulnerability exists in Huatian Power Collaboration Office System, which can be exploited by attackers to obtain sensitive information...

Huatian Power collaborative OA office system has information leakage vulnerability

Dalian Huatian Software Co., Ltd. is an OA software and solution provider. An information leakage vulnerability exists in Huatian Power Collaborative OA Office System, which can be exploited by attackers to obtain sensitive information...

Cybozu Garoon 信息泄露漏洞

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, E-mail, bookmark, scheduler, bulletin board, document management, etc. An information disclosure vulnerability exists in Cybozu Garoon, which stems from exporting too much data in multiple applications...

Cybozu Garoon Authorization Issue Vulnerability (CNVD-2022-54302)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. Cybozu Garoon suffers from an authorization issue vulnerability that originates from improper privilege managemen...

Cybozu Garoon License Issue Vulnerability (CNVD-2022-54300)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon, which originates from an error in the processing of...

Cybozu Garoon Operation Limit Bypass Vulnerability (CNVD-2022-53803)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. Cybozu Garoon suffers from an Operation Restriction Bypass vulnerability that originates from improper privilege...

Cybozu Garoon Input Validation Error Vulnerability (CNVD-2022-53806)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An input validation error vulnerability exists in Cybozu Garoon, which stems from insufficient validation of...

JFinalOA SQL注入漏洞

JFinalOA is an enterprise office system developed based on the JFinal framework.JFinalOA has a SQL injection vulnerability that can be exploited by attackers to execute arbitrary SQL statements...

Tongda2000 SQL Injection Vulnerability (CNVD-2022-71114)

Tongda2000 is a web-based intelligent office system from Tongda, China. a SQL injection vulnerability exists in Tongda2000 v11.10, which stems from the product's failure to effectively filter the special characters in the DELETESTR parameter of the delete.php file. An attacker could use this...

Tongda2000 SQL Injection Vulnerability

A SQL injection vulnerability exists in Tongda2000, a web-based intelligent office system from China Tongda, which originates from the dname parameter in the product's exportdata.php file that does not securely handle special characters in user input data. An attacker can execute malicious SQL...

Lemon OA 跨站脚本漏洞

Lemon OA is an open source office OA system developed by XuHuisheng personal developer using the Java language.Lemon OA V1.10.0 version of the Editing component has a security vulnerability that can be exploited by attackers to execute arbitrary web scripts or HTML...

SQL injection vulnerability exists in Tongda OA (CNVD-2021-73171)

OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Xinke Technology Co. There is a SQL injection vulnerability in Tongda OA, attackers can use the vulnerability to obtain sensitive information in the databas...

Cybozu Garoon Bulletin Operational Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in Bulletin in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change the data in the bulletin without proper privileges...