55 matches found
CVE-2021-22859
The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege...
CVE-2021-22859
The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege...
CVE-2021-22859
The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege...
CVE-2021-22860
EIC e-document system does not perform completed identity verification for sorting and filtering personnel data. The vulnerability allows remote attacker to obtain users’ credential information without logging in the system, and further acquire the privileged permissions and execute arbitrary...
Privilege escalation
The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege...
CVE-2021-22860 EIC e-document system - Broken Authentication
EIC e-document system does not perform completed identity verification for sorting and filtering personnel data. The vulnerability allows remote attacker to obtain users’ credential information without logging in the system, and further acquire the privileged permissions and execute arbitrary...
CVE-2021-22860
CVE-2021-22860 affects the EIC e-document system (Excellent Infotek Corporation). The vulnerability arises from incomplete identity verification when sorting and filtering personnel data, allowing a remote attacker to obtain user credentials without logging in and potentially gain privileged perm...
CVE-2021-22859 EIC e-document system - SQL Injection
The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege...
CVE-2021-22859
CVE-2021-22859 affects the EIC e-document system: the data querying function does not filter special characters, enabling SQL injection. The root cause is improper input filtering in the query path, allowing remote attackers to inject SQL syntax and execute arbitrary commands without privileges. ...
PT-2021-15232
Name of the Vulnerable Software and Affected Versions EIC e-document system affected versions not specified Description The issue concerns the users' data querying function of the EIC e-document system, which fails to filter special characters. This oversight allows remote attackers to inject SQL...
杰印资讯公司 Excellent Infotek Corporation EIC e-document system 授权问题漏洞
Excellent Infotek Corporation EIC e-document system is an application system of Excellent Infotek Corporation. EIC e-document system is an application system of Excellent Infotek Corporation. It provides precise, simple and standardized XML document forms to simplify the process of writing and...
CVE-2021-22859: Improper Neutralization of Special Elements used in an SQL Command
The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege...
CVE-2021-22860: Improper Authentication
EIC e-document system does not perform completed identity verification for sorting and filtering personnel data. The vulnerability allows remote attacker to obtain users’ credential information without logging in the system, and further acquire the privileged permissions and execute arbitrary...
PT-2021-15233
Name of the Vulnerable Software and Affected Versions EIC e-document system affected versions not specified Description The issue concerns the EIC e-document system, which fails to perform complete identity verification for sorting and filtering personnel data. This allows a remote attacker to...
Simple E-Document 1.31 - username SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Simple E-Document 1.31 - 'username' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://www.tecorange.com/index.php/download-free-open-source-software/79-simple-e-document-free-open-source-document-and-paper-m...
Simple E-Document 1.31 - username SQL Injection
Simple E-Document 1.31 - username SQL Injection Exploit Title: Simple E-Document 1.31 - 'username' SQL Injection Dork: N/A Date: 2018-11-14 Exploit Author: Ihsan Sencan Vendor Homepage:...
Simple E-Document 1.31 SQL Injection
Exploit Title: Simple E-Document 1.31 - 'username' SQL Injection Dork: N/A Date: 2018-11-14 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.tecorange.com/index.php/download-free-open-source-software/79-simple-e-document-free-open-source-document-and-paper-m Software Link:...
Simple E-Document 1.31 - 'username' SQL Injection
Exploit Title: Simple E-Document 1.31 - 'username' SQL Injection Dork: N/A Date: 2018-11-14 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.tecorange.com/index.php/download-free-open-source-software/79-simple-e-document-free-open-source-document-and-paper-m Software Link:...