Unauthorized Access Vulnerability in Luhua OA (Government Edition)

LUCA OA Government Edition is a new type of Xinchuang OA system specially developed for government agencies and institutions in China, using a combination of component technology and Web technology and cross-platform. Unauthorized access vulnerability exists in LUCA OA Government Edition. An...

SQL Injection Vulnerability in LUCA OA (Government Edition)

LUCA OA system adopts three-tier structure mode, system development adopts java technology, and the database supports Mysql, SQL Server, Oracle and so on. SQL injection vulnerability exists in LUCA OA Government Edition, which can be exploited by attackers to obtain sensitive information from the...