262 matches found
PT-2024-20970 · Ruvaroa · Ruvaroa
Name of the Vulnerable Software and Affected Versions: RuvarOA versions 6.01 through 12.01 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/bulletin/bulletin template show.aspx" API endpoint. Recommendations: For...
CVE-2024-25512: Improper Neutralization of Special Elements used in an SQL Command
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attachid parameter at /Bulletin/AttachDownLoad.aspx...
CVE-2024-25511
The office automation system RuvarOA (versions v6.01 through v12.01 ) is vulnerable to a SQL injection vulnerability. The root cause is a lack of validation for externally entered SQL statements via the id parameter at the /AddressBook/address_public_new.aspx API endpoint. An attacker can exploit...
CVE-2024-25511: Improper Neutralization of Special Elements used in an SQL Command
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/addresspublicnew.aspx...
PT-2024-20975 · Ruvaroa · Ruvaroa
Name of the Vulnerable Software and Affected Versions: RuvarOA versions 6.01 through 12.01 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the file id parameter at the "/CorporateCulture/kaizen download.aspx" API endpoint. Recommendation...
CVE-2024-25510
The RuvarOA office automation system (versions v6.01 and v12.01 ) is vulnerable to a SQL injection flaw. The root cause is a lack of validation for externally entered SQL statements in the id parameter of the /AddressBook/address_public_show.aspx endpoint. An attacker can exploit this to execute ...
CVE-2024-25513
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /CorporateCulture/kaizendownload.aspx...
CVE-2024-25511
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/addresspublicnew.aspx...
CVE-2024-25509
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sysfilestorageid parameter at /WorkFlow/wffiledownload.aspx...
CVE-2024-25511
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/addresspublicnew.aspx...
PT-2024-20972 · Ruvaroa · Ruvaroa
Name of the Vulnerable Software and Affected Versions: RuvarOA versions 6.01 through 12.01 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/AddressBook/address public show.aspx" API endpoint. Recommendations: For...
CVE-2024-25512
The RuvarOA office automation system (versions 6.01 through 12.01 ) is susceptible to a SQL injection vulnerability. The flaw exists in the /Bulletin/AttachDownLoad.aspx endpoint due to a lack of proper validation of the attach_id parameter against external SQL input. An attacker could exploit th...
CVE-2024-25507
The office automation system RuvarOA versions 6.01 and 12.01 is vulnerable to a SQL injection vulnerability. The root cause is the lack of validation for the email_attach_id parameter within the /LHMail/AttachDown.aspx file against external SQL input. An attacker can exploit this to execute illeg...
Unauthorized Access Vulnerability in LuvarOA Collaboration Office Platform
Luvar RuvarOA collaborative office system adopts three-tier structure model, the system development adopts java technology, the database supports Mysql, SQL Server, Oracle and so on. There is an unauthorized access vulnerability in Luvar RuvarOA Office, which can be exploited by attackers to obta...
SQL Injection Vulnerability in RuvarOA Collaboration Office System of Guangzhou Luhua Computer Co.
Luvar RuvarOA collaborative office system adopts three-tier structure model, the system development adopts java technology, the database supports Mysql, SQL Server, Oracle and so on. There is a SQL injection vulnerability in the RuvarOA system of Guangzhou Luhua Computer Co., Ltd, which can be...
RuvarOA /ContractManage/get_company.aspx SQL Injection Vulnerability
No description provided by source...
RuvarOA /flow/flow_get_if_value.aspx SQL Injection Vulnerability
No description provided by source...
ruvar OA系统 bulletin_template_show.aspx 参数id SQL注入漏洞
0x01 框架概述 璐华RuvarOA机关事业版办公自动化系统是广州市璐华计算机科技有限公司专门针对我国党政机关、大型企事业单位开发，采用组件技术和Web技术相结合，基于Windows平台，构建在大型关系数据库管理系统基础上的，以行政办公为核心，以集成融通业务办公为目标，将网络与无线通讯等信息技术完美结合在一起设计而成的新型办公自动化应用系统。 该系统根据中国国情和行政管理的惯例，旨在从根本上提高办公及行政管理的效率和水平，并借助与计算机与信息科技的成果为领导和决策人员提供全面及时的决策支持服务，是颇具实用性、先进性、经济性的政府机关协同办公系统。...