CVE-2025-10273

A vulnerability was identified in erjinzhi 10OA 1.0. Affected by this vulnerability is an unknown functionality of the file /view/file.aspx. Such manipulation of the argument File leads to path traversal. The exploit is publicly available and might be used. The vendor was contacted early about th...

CVE-2025-10273

A vulnerability was identified in erjinzhi 10OA 1.0. Affected by this vulnerability is an unknown functionality of the file /view/file.aspx. Such manipulation of the argument File leads to path traversal. The exploit is publicly available and might be used. The vendor was contacted early about th...

CVE-2025-10273 erjinzhi 10OA file.aspx path traversal

A vulnerability was identified in erjinzhi 10OA 1.0. Affected by this vulnerability is an unknown functionality of the file /view/file.aspx. Such manipulation of the argument File leads to path traversal. The exploit is publicly available and might be used. The vendor was contacted early about th...

CVE-2025-10273 erjinzhi 10OA file.aspx path traversal

A vulnerability was identified in erjinzhi 10OA 1.0. Affected by this vulnerability is an unknown functionality of the file /view/file.aspx. Such manipulation of the argument File leads to path traversal. The exploit is publicly available and might be used. The vendor was contacted early about th...

CVE-2025-10273

CVE-2025-10273 affects erjinzhi 10OA 1.0. A path traversal vulnerability exists in the /view/file.aspx handler caused by manipulation of the File argument. The exploit is publicly available; the vendor has not responded to disclosure. Several sources note no information about a fixed version or p...

PT-2025-37268

Name of the Vulnerable Software and Affected Versions: erjinzhi 10OA version 1.0 Description: A path traversal vulnerability exists due to manipulation of the File argument in the /view/file.aspx file. The exploit is publicly available. The vendor was contacted but did not respond. Recommendation...

鸿信办公自动化系统/oa/File.aspx和/Page/System/UserDetail.aspx存在遍历漏洞

No description provided by source...

逐浪CMS注入漏洞两处

简要描述： 无需登录，完美的注射点！ 详细说明： 0x1 AppWebrckpp0om.dll Userfile 类，PageLoad事件就有问题 if base.Request"state" != null && base.Request"state" == "tr" string str4 = base.Request.QueryString"FD"; this.FileUrl = this.FileJiemastr4; this.hid.Value = str4; this.file = this.bfile.SelectFilestring.Concatnew object "...