SAP S/4HANA 和 SAP Business One 安全漏洞

SAP Business One is a product of SAP, a German company.SAP Business One is a set of enterprise management software. The software includes functions such as financial management, operations management and human resource management. SAP Business One has an information disclosure vulnerability that...

SAP Business One 代码问题漏洞

SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. A denial-of-service vulnerability exists in SAP Business One version 10.0, which stems from improper input clean...

SAP Business One CSV注入漏洞

SAP Business One is a suite of enterprise management software from SAP, a German company. SAP Business One version 10.0 is vulnerable to CSV injection, which can be exploited by attackers to execute arbitrary commands on a victim's computer...

SAP Business One SQL Injection Vulnerability

SAP Business One is a suite of enterprise management software from SAP, a German company. SAP Business One version 10.0 has a SQL injection vulnerability that stems from the lack of effective validation and escaping of SQL statements, which can be exploited by an attacker with business privileges...

SAP Business One Path Traversal Vulnerability

SAP Business One is a set of enterprise management software developed by SAP, a German company. SAP Business One is vulnerable to a path traversal vulnerability that could be exploited to traverse the file system to access files or directories outside of restricted directories...

Logic Vulnerabilities in the New Business Warfare Sandbox System of Xindao Technology Co.

New Way Technology Co., Ltd. is an enterprise management software and enterprise Internet service provider. A logic vulnerability exists in the Xindao New Business Warfare Sandbox system of Xindao Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...

Kingdee Cloud-Star has Arbitrary File Read Vulnerability

Kingdee Cloud-Star is a new generation of strategic enterprise management software developed by Kingdee Software China Co. Ltd. based on cutting-edge technologies such as cloud computing, big data, social networking, artificial intelligence and Internet of Things. There is an arbitrary file read...

File Upload Vulnerability in PowerSoft's Agile Development Framework

PowerSoft Agile Development Framework is a set of software system projects based on intelligent scalable components, suitable for enterprise management software and Internet platform back-end system development, the framework provides a perfect permissions role management functions, rapid...

Golden Magpie Door Enterprise Management Software Has Multiple SQL Injection Vulnerabilities

Golden Magpie Door Enterprise Management Software is a comprehensive management system for the production and sales of wooden door manufacturers and the purchase of customers. There are multiple SQL injection vulnerabilities in Golden Magpie Door Enterprise Management Software, which can be...

kingdee EAS系统 V7.5 /plt_iservice/service/findFavList.action 远程命令执行漏洞

0x01 框架介绍 全球第一款融合TOGAF标准SOA架构的企业管理软件，金蝶EAS面向亟待跨越 成长鸿沟的大中型企业，以"创造无边界信息流"为产品设计理念， 支持云计算、SOA 和动态流程管理的整合技术平台，全面覆盖企业战略管理、风险管理、集团财务管 理、战略人力资源管理、跨组织供应链、多工厂制造和外部产业链等管理领域，突破 流程制造、项目制造、供应商协作、客户协作等复杂制造和产业链协同应用，实现业 务的全面管理，支持管理创新与发展，帮助企业敏捷应对日益复杂的商业环境变化， 提升整体运作效率，实现效益最大化。 官方主页：www.kingdee.com 0x02 漏洞细节...