SQL Injection Vulnerability in Panmicro oa e-cology8 mo*** Component

Panmicro collaborative management application platform e-cology is a set of collaborative business platform. A SQL injection vulnerability exists in the Panmicro oa e-cology8 mo component, which can be exploited by an attacker to obtain sensitive information from a database...

SQL Injection Vulnerability in Panmicro oa e-cology8 ad*** Component

Panmicro collaborative management application platform e-cology is a set of collaborative business platform. A SQL injection vulnerability exists in the Panmicro oa e-cology8 ad component, which can be exploited by an attacker to obtain sensitive information from a database...

Unauthorized Access Vulnerability in Panmicro oa e-cology8

Panmicro collaborative management application platform e-cology is a set of collaborative business platform. An unauthorized access vulnerability exists in Panmicro oa e-cology8, which can be exploited by attackers to obtain sensitive information...

Remote Code Execution Vulnerability in Panmicro e-cology OA System

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...

Directory Traversal Vulnerability in Panavision e-office

Panmicro Collaboration Office System Standard Edition e-office is an office automation solution that provides users with a complete set of standards. A directory traversal vulnerability exists in Panmicro e-office. An attacker can exploit the vulnerability to obtain sensitive information...

Command Execution Vulnerability in Panmicro e-cology

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...

Override Access Vulnerability in Panavision E-Mobile

Panavision E-Mobile is a mobile office platform. An override access vulnerability exists in Panmicro E-Mobile. An attacker can use the vulnerability to modify the platform authentication code, obtain database information, lock the OA system and other operations...

Struts2 Remote Command Execution Vulnerability in Panmicro E-Mobile Mobile Office System

Panmicro E-Mobile Mobile Office System is a mobile office platform. Panmicro E-Mobile Mobile Office System uses Apache Struts xwork as the web application framework. Due to the existence of a remote code execution high-risk vulnerability in the software, an attacker can utilize the vulnerability ...

Expression injection vulnerability in e-mobile platform login.do page of Shanghai Panmicro Network Technology Co.

e-mobile is Panavision's mobile office product for cell phones, tablets and other mobile terminals. An expression injection vulnerability exists in the login.do page of the e-mobile platform of Shanghai Panmicro Network Technology Co. The vulnerability allows an attacker to remotely execute...

Panmicro e-cology v8 SQL Injection Vulnerability

Panmicro collaborative management application platform e-cology is a set of collaborative business platform. A SQL injection vulnerability exists in the id parameter of the Panmicro e-cology oa system/hrm/resource/HrmResourceContactEdit.jsp page, which allows an attacker to elevate the privileges...

SQL Injection Vulnerability in Panmicro OA Office System

Panavision OA Office System is a coordination office software. Panmicro OA Office System suffers from a SQL injection vulnerability and a lack of filtering of the formName parameter, which can be exploited by an attacker to obtain sensitive information from a website database...

SQL Injection, Arbitrary File Upload Vulnerability in Panavision Standard Edition e-office

Panmicro Office e-office Standard Edition is a work platform for small businesses or teams. SQL injection and arbitrary file upload vulnerabilities exist in Panmicro Standard Edition e-office, allowing attackers to exploit the vulnerabilities to obtain sensitive database information, upload...

SQL Injection Vulnerability in Panmicro Collaborative Business System

Panavision Collaborative Business System is a complete enterprise collaborative work platform. A SQL injection vulnerability exists in the full version of Panmicro Collaborative Business System, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flow/flowtype_free.php Parameter

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flow/flowtypefree.php parameter, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Panmicro Collaborative Business System

Panavision Collaborative Business System is a complete enterprise collaborative work platform. A SQL injection vulnerability exists in the typename and id parameters of the Panmicro Collaborative Business System. It allows attackers to exploit the vulnerability to gain access to sensitive...

Multiple SQL Injection Vulnerabilities in Panmicro's Mobile OA Solution e-mobile

E-Mobile is a mobile office product based on Android client released by Shanghai Panmicro Network Technology Co. There are multiple SQL injection vulnerabilities in Panmicro's mobile OA solution, e-mobile. It allows attackers to utilize commonly used SQL injection tools to obtain sensitive databa...

Panmicro e-office Collaboration Management Platform Privilege Bypass Vulnerability

A login bypass vulnerability exists in the Panmicro e-office Collaboration Management Platform, which allows an attacker to directly log into the OA system with super administrator privileges without login credentials...

Panmicro e-office Collaboration Management Platform File Download Vulnerability

Panmicro e-office's /inc/attach.php page has no filter on the file download name ATTACHMENTNAME passed in by the url... /, which can be used ... / to traverse the directory so that any file in any directory can be downloaded, leading to the formation of an arbitrary file download problem...

SQL Injection Vulnerability in Panmicro OA Office System Requestid Parameter

Panavision OA Office System is a coordination office software. A SQL injection vulnerability exists in the Panmicro OA Office System requestid parameter, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

Unauthorized Operation Vulnerability in Panavision OA Office System

Panavision OA Office System is a coordination office software. An unauthorized operation vulnerability exists in Panmicro OA Office that could be exploited by an attacker to perform an unauthorized operation...