EUVD-2024-16789

Malicious code in bioql PyPI...

CVE-2024-1012

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

File Upload Vulnerability in Wando ezOFFICE Collaboration Management Platform (CNVD-2024-14208)

Wando ezOFFICE collaborative management platform is a comprehensive information base application platform. A file upload vulnerability exists in Wando ezOFFICE Collaborative Management Platform, which can be exploited by an attacker to gain server privileges...

CVE-2024-1012

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

CVE-2024-1012

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

Sql injection

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

CVE-2024-1012 Wanhu ezOFFICE wf_printnum.jsp sql injection

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

CVE-2024-1012 Wanhu ezOFFICE wf_printnum.jsp sql injection

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

CVE-2024-1012

Wanhu ezOFFICE 11.1.0 is affected by a SQL injection in wf_printnum.jsp via the recordId parameter. The issue, described as critical and remotely exploitable, affects processing of defaultroot/platform/bpm/work_flow/operate/wf_printnum.jsp and has been publicly disclosed (VDB-252281). Multiple so...

Wanhu ezOFFICE SQL Injection Vulnerability

Wanhu ezOFFICE is a comprehensive office suite software from Wanhu, a Chinese company. A SQL injection vulnerability exists in Wanhu ezOFFICE version 11.1.0, which originates in defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp, which contains unknown processing that can lead to SQL...

PT-2024-16042 · Wanhu · Wanhu Ezoffice

Name of the Vulnerable Software and Affected Versions: Wanhu ezOFFICE version 11.1.0 Description: A critical issue has been found in the processing of the file defaultroot/platform/bpm/work flow/operate/wf printnum.jsp. The manipulation of the recordId argument leads to sql injection. The attack...

File upload vulnerability in Wando ezOFFICE collaboration management platform (CNVD-2021-54069)

Wando ezOFFICE collaborative management platform is a comprehensive information base application platform. A file upload vulnerability exists in Wando ezOFFICE Collaborative Management Platform, which can be exploited by an attacker to gain control of the server...

Arbitrary File Download Vulnerability in Wando ezOFFICE Collaboration Management Platform

Wando ezOFFICE collaborative management platform is a comprehensive information base application platform. An arbitrary file download vulnerability exists in Wando ezOFFICE Collaborative Management Platform. An attacker can exploit the vulnerability to download arbitrary files...

File Upload Vulnerability in ezOFFICE Collaboration Management Platform

Wando Ezoffice system is a set of jsp-based oa system , the system is based on J2EE architecture technology of three-tier architecture , completely B / S architecture , widely used in various industries . ezOFFICE collaborative management platform there is a file upload vulnerability , attackers...

Logic flaws exist in ezOFFICE Collaborative Management Platform of Beijing Wando Network Technology Co.

ezOFFICE collaborative management platform is a comprehensive information base application platform. There is a logic flaw vulnerability in the ezOFFICE Collaborative Management Platform of Beijing Wando Network Technology Co. Ltd, which can be exploited by an attacker to reset a user's password...

Wando ezoffice Collaboration Management Platform has an overstepping vulnerability

Wando ezOFFICE collaborative management platform is a comprehensive information base application platform. Wando ezOFFICE Collaborative Management Platform has an overstepping vulnerability that allows an attacker to successfully achieve elevation of privilege through ordinary user identity...

S2-045 Remote Code Execution Vulnerability in Wando ezOffice Login Jump Screen

Manto ezOffice is a comprehensive information base application platform. Wando ezOffice uses Apache middleware as the framework, the login jump interface exists S2-045 remote code execution vulnerability. This vulnerability allows an attacker to remotely execute commands and gain server privilege...

SQL Injection Vulnerability in Webservice of Wando ezOFFICE Collaboration Office System

Wando ezOFFICE collaborative management platform is a comprehensive information base application platform. A SQL injection vulnerability exists in the Wando ezOFFICE Collaborative Office System webservice. The lack of filtering of the 'SOAP unitLevel' parameter allows attackers to exploit the...

Million ezOffice collaborative office management platform/defaultroot/xfservlet/XFireServlet/DealFileWebService injection vulnerability

No description provided by source...

Million Ezoffice system /defaultroot/sp/desktop. jsp POST parameters userName SQL injection vulnerability

No description provided by source...