CVE-2023-37290 InfoDoc Document On-line Submission and Approval System - Server-Side Request Forgery (SSRF)

InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to load remote or local resources through HTML tags such as iframe. This vulnerability allows...

Design/Logic Flaw

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...

CVE-2023-37289 InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...

CVE-2023-37289

This CVE (CVE-2023-37289) affects InfoDoc Document On-line Submission and Approval System (versions 22547, 22567) and concerns an Unrestricted Upload of File with Dangerous Type in the file uploading function. The root cause is a permissive file upload mechanism that allows an unauthenticated rem...

SQL Injection Vulnerability in 'txtContent' Parameter of Administrative Approval System of Wave Group

It is a cloud computing infrastructure platform of Shandong Wave Qilu Software Industry Co. A SQL injection vulnerability exists in the parameters of the administrative approval system of Wave Group. The lack of filtering of the 'txtContent' parameter allows an attacker to exploit the vulnerabili...

联邦政府网上审批系统 WebUserList.aspx 页面 id 参数 SQL 注入

No description provided by source...

联邦政府网上审批系统 spsl.aspx 页面 xksxid 参数 SQL 注入

No description provided by source...

联邦政府网上审批系统 sxlist.aspx 页面 baseorg 参数 SQL 注入

No description provided by source...

联邦政府网上审批系统 listBcmx2.aspx 页面 org 参数 SQL 注入

No description provided by source...

联邦政府网上审批系统 ckmxlist.aspx 页面 tbSxmc 参数 SQL 注入

No description provided by source...

SQL injection vulnerability exists in the xzsp/gxxt/tjfx/list4xq.aspx page of the approval system of Handan Lianbang Software Development Co.

The Administrative Approval System AAS is a system that helps to improve the efficiency of administrative authorization and the level of government services. SQL injection vulnerability exists in the approval system of Handan Lianbang Software Development Co. The injection file:...

漫游用友集团各大系统

简要描述： 漫游用友集团各大系统 详细说明： 在一个月黑风高的夜晚，用友某员工的集团办公平台账号，悄悄地泄露了。 // Send message Transport transport=session.getTransport; transport.connect"192.168.210.160" , 25, "ch2","1r"; transport.sendMessagemessage,new Addressnew InternetAddress"[email protected]" ; transport.close;...

[iBliss Security Advisory] Cross-Site Scripting (XSS) vulnerability in Design-approval-system wordpress plugin

Design-Approval-System Wordpress plugin XSS vendor product description A system to streamline the process of getting designs, photos, documents, videos or music approved by clients quickly. Bug Description The walkthrouth web page does not validate the step parameter leading to a Cross-site...

CVE-2013-5711

Cross-site scripting XSS vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin before 3.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin before 3.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step parameter...

CVE-2013-5711

Design Approval System WordPress plugin (before 3.7) is affected by an XSS in admin/walkthrough/walkthrough.php via the step parameter. The vulnerability allows remote attackers to inject arbitrary script/HTML. Public references include PoC payloads and vendor notes; patches were released to fix ...

CVE-2013-5711

Cross-site scripting XSS vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin before 3.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step parameter...

WordPress Design-Approval-System 3.6 Cross Site Scripting

Design-Approval-System Wordpress plugin XSS vendor product description A system to streamline the process of getting designs, photos, documents, videos or music approved by clients quickly. Bug Description The walkthrouth web page does not validate the step parameter leading to a Cross-site...

WordPress Design Approval System Plugin <= 3.6 - XSS

Because of this vulnerability in admin/walkthrough/walkthrough.php, the attackers can inject arbitrary web script or HTML via the "step" parameter. Solution Update the plugin...

Joomla! Component Article Factory Manager - Arbitrary File Upload

vendor :http://www.thefactory.ro/shop/joomla-components/article-manager.html ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888 888.8' 888.8' 888 88b ooo 888' 888' o888o Y8bood8P' 8' 8'...