35 matches found
Landray EIS SQL注入漏洞 Detection
Landray EIS 2001 through 2006 contains a SQL injection caused by unsanitized input in Message/fimessagereceiver.aspx?replyid=, letting attackers execute arbitrary SQL commands, exploit requires crafted input. !/usr/bin/env python3 -- coding: utf-8 -- """Landray EIS 2001 through 2006 contains a SQ...
Landray EIS - SQL Injection Detection
Landray's smart collaboration platform EIS has a very rich collection of modules to meet the needs of organizations and enterprises in knowledge, collaboration, and project management system construction. There is a SQL injection vulnerability in the rptlistreportdefinefield.aspx interface of...
Landray EIS WS_getAllInfos - Information Disclosure Detection
Landray EIS WSgetAllInfos interface suffers from a sensitive information disclosure vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Landray EIS WSgetAllInfos interface suffers from a sensitive information disclosure vulnerability.""" from kittysploit import from...
VulnCheck KEV: CVE-2025-22214
Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...
EUVD-2025-2670
Malicious code in bioql PyPI...
EUVD-2024-45456
Malicious code in bioql PyPI...
com.focframework:foc (>=1.7.2, <=1.7.3), com.focframework:focdatasource (>=1.7.2, <=1.7.3) +9 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.2.2)
net.sf.jasperreports:jasperreports MAVEN version 6.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.focframework:foc =1.7.2, =1.7.2, =1.7.2, =0.0.9, =0.5.5, =0.5.8 -...
CVE-2025-22214
Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...
CVE-2024-51623
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mehral WP EIS wp-eis allows SQL Injection.This issue affects WP EIS: from n/a through = 1.3.3...
CVE-2025-22214
Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...
CVE-2025-22214: Improper Neutralization of Special Elements used in an SQL Command
Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...
CVE-2025-22214
CVE-2025-22214 relates to Landray EIS versions 2001–2006 and describes a SQL injection vulnerability in the message handling path at Message/fi_message_receiver.aspx?replyid= . The available connected documents confirm the affected product and the injection vector but do not provide explicit expl...
CVE-2025-22214
Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...
CVE-2025-22214
Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...
CVE-2024-51623
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mehral WP EIS wp-eis allows SQL Injection.This issue affects WP EIS: from n/a through = 1.3.3...
CVE-2024-51623 WordPress WP EIS plugin <= 1.3.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mehral WP EIS wp-eis allows SQL Injection.This issue affects WP EIS: from n/a through = 1.3.3...
CVE-2024-51623 WordPress WP EIS plugin <= 1.3.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mehral WP EIS wp-eis allows SQL Injection.This issue affects WP EIS: from n/a through = 1.3.3...
CVE-2024-51623
CVE-2024-51623 describes an SQL Injection in WordPress plugin WP EIS (Mehrdad Farahani) — affected versions: WP EIS
CVE-2024-51623: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mehral WP EIS wp-eis allows SQL Injection.This issue affects WP EIS: from n/a through = 1.3.3...
WordPress plugin WP EIS has a SQL injection vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...