SQL Injection Vulnerability in Xinhuo OA Office System (CNVD-2020-73398)

Xinhu OA office system is an open source online office system. SQL injection vulnerability exists in Xinhuo OA Office System. An attacker can exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Tongda OA Wizard 2017 Version (Android)

Tongda OA Wizard 2017 Edition is the mobile version of the software of Tongda OA network intelligent office system. Tongda OA Wizard 2017 Edition Android version suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Arbitrary File Write Vulnerability in Jinhe OA-C6

Jinhe OA system product C6 collaborative management platform has more than 20 application modules, more than 160 application sub-modules, involving enterprise management business including collaborative office management, human resource management, project management, customer relationship...

Cybozu Garoon incorrect input validation vulnerability

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. Cybozu Garoon has a security vulnerability. An attacker can use the vulnerability to log in to the product users can delete some data on the bulletin board...

XML entity injection vulnerability exists in Panmicro e-cology (CNVD-2020-58448)

Panmicro e-cology is an OA office system made for large and medium-sized enterprises, supporting PC, mobile and WeChat simultaneous office and so on. An XML entity injection vulnerability exists in Panmicro e-cology. An attacker can exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in UFIDA U8-OA

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA, which can be exploited by attackers to obtain sensitive information from the database...

Guangzhou red sail technology limited company red sail ioffice hospital OA exists arbitrary file download vulnerability

Guangzhou Redfan Technology Co., Ltd. business scope includes computer room maintenance services, information technology consulting services, etc. Guangzhou red sail technology limited company red sail ioffice hospital OA exists arbitrary file download vulnerability, attackers can use the...

Memory Corruption Vulnerability in Multiple Siemens Products

Siemens SIMATIC WinCC OA Open Architecture is a SCADA system from Siemens, Germany, and a component of the HMI series. The system is mainly used in industries such as rail transportation, building automation and public power supply.Information Server is used to report and visualize process data...

Multiple Siemens Products Validation Error Vulnerability

Siemens SIMATIC WinCC OA Open Architecture is a SCADA system from Siemens, Germany, and a component of the HMI series. The system is mainly used in industries such as rail transportation, building automation and public power supply.Information Server is used to report and visualize process data...

SQL Injection Vulnerability in OA Office System of Chongqing Yanglang Technology Co.

It is a web application system that realizes the whole electronic process from learning to working and improves the operational efficiency of the enterprise through the deployment of multi-discipline collaboration modules such as process management, document management, news management, knowledge...

Stored Cross-Site Scripting Vulnerability in Heartland OA

Heartland OA is a multi-functional and intelligent office application. A stored cross-site scripting vulnerability exists in Heartland OA. An attacker can exploit the vulnerability to obtain an administrator cookie...

SQL Injection Vulnerability in Ac***.php File of Xinhuo OA Office System

Xinhu OA office system is an open source online office system. The Ac.php file of Xinhao OA Office System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-7580

A vulnerability has been identified in SIMATIC Automation Tool All versions V4 SP2, SIMATIC NET PC Software V14 All versions V14 SP1 Update 14, SIMATIC NET PC Software V15 All versions, SIMATIC NET PC Software V16 All versions V16 Upd3, SIMATIC PCS neo All versions V3.0 SP1, SIMATIC ProSave All...

File Upload Vulnerability in Tianjian OA

Tianjian OA is a collaborative office system that focuses on healthcare. A file upload vulnerability exists in Tianjian OA, which can be exploited by attackers to upload malicious files and obtain server administrative privileges...

SQL injection vulnerability in Tongda oa system (CNVD-2020-31075)

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a front-end SQL injection...

Cross site scripting

A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow Reflected Cross Site Scripting. HPE has made the following software updates and mitigation information to resolve the vulnerability in HPE Onboard...

Arbitrary File Deletion Vulnerability in Bitter Chrysanthemum OA

Bitter Chrysanthemum OA office system is a general-purpose collaborative OA management software for small and medium-sized enterprises. Bitter Daisy OA arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete any server file...

SQL Injection Vulnerability in the OA System of Shenzhen Boshi Xiechuang Network Technology Co.

Ltd. was founded in 2012, is China's largest open source collaboration management product development, services and solutions provider. There is a SQL injection vulnerability in the OA system of Shenzhen Boosi Xiechuang Network Technology Co., Ltd, which can be exploited by an attacker to obtain...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24724)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24722)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office systems, mobile OA applications and other collaborative OA solutions fo...