SQL injection vulnerability in the backend of Tongda oa (CNVD-2021-22798)

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Command Execution Vulnerability in Tongda OA (CNVD-2021-23368)

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Command Execution Vulnerability in Tongda OA (CNVD-2021-21890)

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

UFIDA U8-OA l***.jsp suffers from SQL injection vulnerability.

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA l.jsp, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in UFIDA U8-OA is***.jsp

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA is.jsp, which can be exploited by an attacker to obtain sensitive information from the database...

Information Disclosure Vulnerability in Panavision OA

Panavision OA is an all-in-one mobile office cloud platform. An information disclosure vulnerability exists in Panmicro OA. An attacker can exploit the vulnerability to gain unauthorized access to database logs...

Unauthorized Access Vulnerability in Luhua OA (Government Edition)

LUCA OA Government Edition is a new type of Xinchuang OA system specially developed for government agencies and institutions in China, using a combination of component technology and Web technology and cross-platform. Unauthorized access vulnerability exists in LUCA OA Government Edition. An...

SQL Injection Vulnerability in LUCA OA (Government Edition)

LUCA OA system adopts three-tier structure mode, system development adopts java technology, and the database supports Mysql, SQL Server, Oracle and so on. SQL injection vulnerability exists in LUCA OA Government Edition, which can be exploited by attackers to obtain sensitive information from the...

File Upload Vulnerability in E-office OA Self-service Platform of Shanghai Panmicro Network Technology Co.

E-office OA self-service platform is a professional collaborative OA software for small and medium-sized organizations. A file upload vulnerability exists in the E-office OA self-service platform of Shanghai Panmicro Network Technology Co., Ltd. that can be exploited by an attacker to gain contro...

SQL Injection Vulnerability in UFIDA U8-OA se***.jsp

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA se.jsp, which can be exploited by an attacker to obtain sensitive information from the database...

Multiple Vulnerabilities in Zhiyuan OA

Founded in March 2002 and headquartered in Beijing, Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet has always been focusing on the field of enterprise-level management software, and is a high-tech enterprise integrating product design, research and development, sales and service. The...

SQL injection vulnerability in UF U8-OA in***.jsp file

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in the UFIDA U8-OA in.jsp file, which can be exploited by an attacker to obtain sensitive database information...

SQL Injection Vulnerability in UFIDA U8-OA (CNVD-2021-12781)

Founded in 1988, UFIDA is a leading global provider of cloud services and software for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA. An attacker can exploit the vulnerability to gain access to sensitive database information...

UFIDA U8-OA has information leakage vulnerability

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An information disclosure vulnerability exists in UFIDA U8-OA. An attacker can exploit the vulnerability to obtain the SessionID of all users and log ...

Unauthorized Access Vulnerability in UFIDA U8-OA

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An unauthorized access vulnerability exists in UFIDA U8-OA. An attacker can exploit the vulnerability to obtain sensitive information...

Ziehl-Abegg OA Security Breach

Zhiyuan Internet Zhiyuan OA is a collaboration management software from China Zhiyuan Internet Company. Due to the unauthorized access to certain interfaces and insufficient filtering of some functions in older versions of Zhiyuan OA, attackers can upload malicious script files without...

File upload vulnerability in Zhiyuan OA system (CNVD-2021-01627)

Zhiyuan OA is a collaborative management software, a digital collaborative operation platform for medium-sized and large group organizations. A file upload vulnerability exists in Zhiyuan OA system. The vulnerability is due to the existence of unauthorized access vulnerability in some interfaces,...

Logic flaw vulnerability in Xinhuo OA system

Letter call OA system is an open source free office program. A logic flaw vulnerability exists in Xinhao OA System. An attacker can exploit the vulnerability to overwrite the system installation...

SQL Injection Vulnerability in Digital OA (EKP) of Shenzhen Lanling Software Co.

Founded in 2001, BlueLine Software is a professional service provider of digital work and the first strategic partner of AliCloud in the field of knowledge management and collaboration, providing all kinds of organizations with integrated solutions such as intelligent office, mobile portal,...

XSS Vulnerability in Tongda OA Government Edition

Tongda OA is a collaborative office automation software. An XSS vulnerability exists in Tongda OA Government Edition. The vulnerability stems from the lack of proper validation of client data in the WEB application, which can be exploited by remote attackers to inject arbitrary Web scripts or HTM...