103 matches found
XML Entity Injection Vulnerability in Kingdee Cloud K3 Cloud
Kingdee International Software Group Limited is a leading provider of enterprise management software and e-commerce application solutions in the Asia-Pacific region. An XML entity injection vulnerability exists in Kingdee Cloud K3 Cloud, which can be exploited by attackers to obtain sensitive...
Expression Injection Vulnerability in Kingdee GSiS Government Service Platform
GSiS government service platform is an integrated product developed by Kingdee to integrate government affairs disclosure, government services and e-surveillance on a unified e-government platform. Expression injection vulnerability exists in Kingdee GSiS government service platform. It allows...
Kingdee OA Office system /stock/cash/tree/get_part. jsp file ids parameter SQL injection vulnerability
No description provided by source...
Kingdee OA /stock/cash/tree/get_mail. jsp parameter node injection vulnerability
No description provided by source...
Kingdee OA /stock/cash/tree/get_flow. jsp parameter ids time blind
No description provided by source...
Kingdee OA Office system /stock/flow_design/flow_class_custom_add. jsp file class_id parameter SQL injection vulnerability
No description provided by source...
金蝶办公系统get_file.jsp 和getFileUseSpace两处 SQL注入
No description provided by source...
kingdee协同办公系统 fileDownload.do 任意文件下载漏洞
No description provided by source...
金蝶kingdee OA办公系统 /kingdee/disk/add_folder.jsp 等2处 SQL盲注漏洞
No description provided by source...
金蝶协作办公系统 /kingdee/login/comm_user.jsp 等5处 SQL注入漏洞
No description provided by source...
kingdee 金蝶OA系统/oa/admin/application/file_download.jsp 参数filePath 任意文件下载漏洞
No description provided by source...
金蝶协作办公系统 /kingdee/person/ 、 /kingdee/pubinfo/、 /kingdee/test_tree/ 6处 SQL注入漏洞
No description provided by source...
金蝶OA办公系统 /kingdee/custom/ 目录4处 SQL注入漏洞
No description provided by source...
金蝶协作办公系统 /kingdee/tree/tree/ 五处SQL注入漏洞
No description provided by source...
kingdee /kingdee/flow_performance/下6个文件存在SQL盲注漏洞
No description provided by source...
kingdee /kingdee/portal/portlet/document/set.jsp等99处参数portal_id SQL盲注漏洞
No description provided by source...
kingdee EAS系统 V7.5 /plt_iservice/service/findFavList.action 远程命令执行漏洞
0x01 框架介绍 全球第一款融合TOGAF标准SOA架构的企业管理软件，金蝶EAS面向亟待跨越 成长鸿沟的大中型企业，以"创造无边界信息流"为产品设计理念， 支持云计算、SOA 和动态流程管理的整合技术平台，全面覆盖企业战略管理、风险管理、集团财务管 理、战略人力资源管理、跨组织供应链、多工厂制造和外部产业链等管理领域，突破 流程制造、项目制造、供应商协作、客户协作等复杂制造和产业链协同应用，实现业 务的全面管理，支持管理创新与发展，帮助企业敏捷应对日益复杂的商业环境变化， 提升整体运作效率，实现效益最大化。 官方主页：www.kingdee.com 0x02 漏洞细节...
kingdee办公系统的文件/kingdee/portal/portal_info.jsp存在Blind SQL注入漏洞
No description provided by source...