Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24725)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24728)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Unauthorized Access Vulnerability in Tongda OA

Tongda OA is a collaborative office automation software. Tongda OA has an unauthorized access vulnerability that can be exploited by attackers to bypass login and directly enter the background...

Command Execution Vulnerability in Tongda OA

Tongda OA is a collaborative office automation software. A command execution vulnerability exists in Tongda OA, which can be exploited by an attacker to execute arbitrary commands...

File Upload Vulnerability in Born Creative OA System

Born Creative OA office system for the first domestic open source OA software producers, using the leading B / S architecture, cross-platform language php + mysql and other flexible applications, is one of China's most extensive user base of OA software. Born Creative OA system file upload...

File upload vulnerability in Up***.php file of Bitter Chrysanthemum OA Office System

Bitter Chrysanthemum OA office system is suitable for small and medium-sized enterprises, general-purpose collaborative OA management software, incorporating Bitter Chrysanthemum OA's rich experience in management software development for a long time and advanced technology, the system adopts the...

oa-cagliari.inaf.it Cross Site Scripting vulnerability

Security Researcher fakessh Helped patch 1840 vulnerabilities Received 9 Coordinated Disclosure badges Received 60 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting oa-cagliari.inaf.it website and its users. Following...

SQL Injection Vulnerability in Panmicro e-cology OA System

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...

Red Sail OA system has SQL injection vulnerability

Redfan OA is based on SOA architecture, with EIP enterprise information portal and BPM business process engine as the core. Red Sail OA system has SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Zhiyuan OA suffers from an arbitrary file download vulnerability (CNVD-2019-46774)

Zhiyuan OA is an office system developed by Beijing Zhiyuan Internet Software Co. There is an arbitrary file download vulnerability in Zhiyuan OA, which can be exploited by attackers to download arbitrary files...

File Deletion Vulnerability in Panavision OA Collaboration Office System

Panmicro oa office system is a business office software. A file deletion vulnerability exists in Panmicro OA Collaboration Office System, which can be exploited by an attacker to delete arbitrary files...

File Read Vulnerability in Huatian Power OA System

Huatian Power OA system is a collaborative office software developed by Dalian Huatian Software Co. A file read vulnerability exists in the Huatian Power OA system, which can be exploited by attackers to obtain sensitive information...

CVE-2019-16133

An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwords of all employees in the company can be obtained by an ordinary account. Specifically, the attacker sends a jsessionid value for URIs under app/profile/summary/...

Code injection

An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwords of all employees in the company can be obtained by an ordinary account. Specifically, the attacker sends a jsessionid value for URIs under app/profile/summary/...

CVE-2019-16133

An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwords of all employees in the company can be obtained by an ordinary account. Specifically, the attacker sends a jsessionid value for URIs under app/profile/summary/...

CVE-2019-16133

The CVE-2019-16133 issue affects eteams OA v4.0.34 where session handling is not strictly checked, allowing an ordinary account to obtain account names and passwords of all employees by sending a jsessionid value for URIs under app/profile/summary/. Connected sources (Red Hat RH:CVE-2019-16133 an...

SQL Injection Vulnerability in the Frontend of Tongda OA System of Beijing Tongda Science and Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

Arbitrary File Download Vulnerability in Zhiyuan OA

Zhiyuan OA is an office system developed by Beijing Zhiyuan Internet Software Co. There is an arbitrary file download vulnerability in Zhiyuan OA, which can be exploited by attackers to download arbitrary files and obtain sensitive information...

Command Execution Vulnerability in weaver e-cology 8, a Panavision Collaborative Business Software System

Panavision OA Office System is a coordination office software. A command execution vulnerability exists in weaver e-cology 8, a Panmicro collaborative business software system, which can be exploited by an attacker to gain server privileges...

SQL Injection Vulnerability in Trust Call OA System (CNVD-2019-23863)

Xinhuo Co-operation Office System is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhao OA system, which can be exploited by attackers to obtain sensitive information from the database...