1365 matches found
Arbitrary File Read Vulnerability in BlueLine's New Generation Digital OA (Large and Medium Enterprises) EKP
Shenzhen BlueLine Software Co., Ltd. is a well-known large-platform OA service provider and a leading knowledge management solution provider in China, which is a national high-tech enterprise specializing in knowledge-based consulting, software R&D, implementation and technical services for...
Command Execution Vulnerability in Soft Rainbow OA Office Platform
Ltd. has been committed to providing all-round solutions, including products, consulting, development, engineering and services, for the government, enterprises and institutions, especially for the domestic large and medium-sized financial enterprises to manage informationization. A command...
CVE-2020-18019
SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "modeworcAction.php" component...
Sql injection
SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "modeworcAction.php" component...
CVE-2020-18019
CVE-2020-18019: Xinhu OA System v1.8.3 contains an SQL injection in the typeid parameter of the createfolderAjax function (mode_worcAction.php). The root cause is unvalidated input allowing arbitrary commands to be injected, leading to unauthorized access to sensitive information. Reported impact...
CVE-2020-18019
SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "modeworcAction.php" component...
信呼 Rockoa Xinhu SQL注入漏洞
Rockoa Xinhu is a Php-based office OA system from China Xinhu Rockoa. A SQL injection vulnerability exists in Xinhu OA System v1.8.3, which allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "createfolderAjax" function of the "mode worcAction.php"...
Directory Traversal Vulnerability in Qilai OA of Xi'an Huatian Synergy Information Technology Co.
Xi'an Huatian Synergy Information Technology Co., Ltd. is China's collaborative management software provider, collaborative oa management software industry implementation success rate brand, is the domestic focus on collaborative software development and application of the main software vendors...
Command Execution Vulnerability in Panavision OA
Panmicro OA is a standard version of the Panmicro Collaboration Office System program, which can provide users with a collaborative, integrated office environment. A command execution vulnerability exists in OA, which can be exploited by an attacker to gain control of the server...
There are multiple vulnerabilities in BlueLine OA
BlueLine OA Office System is an OA office tool for instant office communication. There are multiple vulnerabilities in BlueLine OA that can be exploited by attackers to gain control of the server...
File Upload Vulnerability in Panavision OA System
Panavision OA is a standard version of the Panavision Collaboration Office System program, which provides users with a collaborative, integrated office environment. A file upload vulnerability exists in the OA system, which can be exploited by an attacker to gain control of the server...
File Upload Vulnerability in OA Office Management System of Xiamen JDT Technology Development Co.
OA office management system is based on the concept of workflow, so that people within the enterprise to share information easily and quickly, efficiently and collaboratively; change the past complex, inefficient manual office, to achieve rapid and comprehensive information collection, informatio...
致远OA thirdpartyController.do 未授权RCE漏洞
...
SQL Injection Vulnerability in UFIDA U8-OA Enterprise Edition (CNVD-2021-29143)
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA Enterprise Edition, which can be exploited by attackers to obtain sensitive information from the...
UFIDA U8 OA Collaboration Management Software has an arbitrary file download vulnerability
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An arbitrary file download vulnerability exists in UFIDA U8 OA Collaboration Management Software. An attacker can exploit this vulnerability to downlo...
蓝凌OA EKP 后台SQL注入漏洞（CNVD-2021-01363）
...
Command Execution Vulnerability in Access Office Anywhere 2013
Tongda OA Office Anywhere is a simple and practical collaborative office OA system. A command execution vulnerability exists in Access Office Anywhere 2013, which can be exploited by an attacker to gain control of the server...