PT-2021-10117

Name of the Vulnerable Software and Affected Versions: Xinhu OA System version 1.8.3 Description: The issue allows remote attackers to obtain sensitive information by injecting arbitrary commands into the typeid variable of the createfolderAjax function in the mode worcAction.php component. This...