Hongfan iOffice 安全漏洞

Hongfan iOffice is an intelligent office system from Hongfan China. A security vulnerability exists in Hongfan iOffice 20, which stems from a logic flaw that could cause an attacker to log in to any system account, including the system administrator...

Arbitrary File Download Vulnerability in iOffice Hospital Edition

hereinafter referred to as: Redfan Technology is one of the top ten military industrial groups - China State Shipbuilding Corporation under the Guangzhou Shipbuilding International Company Limited Holdings of high-tech enterprises. iOffice Hospital Edition exists arbitrary file download...

Red Sail iOffice has a logic flaw vulnerability

Red sail iOffice system is a based on Microsoft .NET technology research and development, the establishment of notebook, cell phone and other convenient terminal as a carrier to realize the mobile information system. ioffice OA system involves hospitals, government, military industry, group...

Guangzhou red sail technology limited company red sail ioffice hospital OA exists arbitrary file download vulnerability

Guangzhou Redfan Technology Co., Ltd. business scope includes computer room maintenance services, information technology consulting services, etc. Guangzhou red sail technology limited company red sail ioffice hospital OA exists arbitrary file download vulnerability, attackers can use the...

SQL Injection Vulnerability in iOffice M2 Backend Management System

iOffice M2 background management system is an office software developed by Guangzhou Hongfan Computer Technology Co. iOffice M2 background management system exists SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

Redfan iOffice Office Software ioCtlSet.asmx suffers from SQL injection vulnerability

Redfan iOffice.net is a professional mobile OA office automation solution provider, providing mobile OA office automation system for medical, government, enterprise and military units. Red Sail iOffice.net OA Office software ioCtlSet.asmx there is a SQL injection vulnerability, the attacker can u...

Unauthorized Access Vulnerability in ioffice

iOffice is a mobile software for internal company to collaborate and communicate online on smartphones, send tasks, and share work knowledge and experience. An unauthorized access vulnerability exists in /prg/set/Report/ioRepTemp.aspx in ioffice, which allows attackers to exploit the vulnerabilit...

SQL injection vulnerability in OA system welcomeShow.aspx page mode parameter of Guangzhou Hongfan Computer Technology Co.

Red sail iOffice system is a based on Microsoft .NET technology research and development, the establishment of notebook, cell phone and other convenient terminal as a carrier to realize the mobile information system. ioffice OA system involves hospitals, government, military industry, group...

SQL Injection Vulnerability in WSLoginMobile.asmx?wsdl Parameter on iOffice System

Redfan iOffice system is a Microsoft .NET technology based on the development of the establishment of notebooks, cell phones and other convenient terminals as a carrier to realize the mobile information system. iOffice system WSLoginMobile.asmx?wsdl parameter exists SQL injection vulnerability, t...

SQL Injection Vulnerability in GetBoxyStatus.ashx File Mode Parameter of ioffice OA System

Red Sail Computer Technology Co., Ltd. is a high-tech enterprise held by China Shipbuilding Marine and Defense Equipment Co., Ltd. CSIC Defense, which is an important part of the national technology center. ioffice OA system involves hospitals, government, military industry, and group industries...

iOffice 0.1 - 'parametre' Remote Command Execution

source: https://www.securityfocus.com/bid/41768/info iOffice is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and the underlying server. iOffice 0.1 is affected; othe...

iOffice 0.1 Remote Command Execution

iOffice 0.1 is vulnerable because it does not sanitize user input. It seems to be modular because none of the scripts are exactly the same on ones I've run across, but they all seem to be vulnerable. Command execution is possible...

iOffice 0.1 - parametre Remote Command Execution

iOffice 0.1 - parametre Remote Command Execution source: https://www.securityfocus.com/bid/41768/info iOffice is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and the...