1365 matches found
SQL Injection Vulnerability in Wave OA Intelligent Office Platform
Longchamp Yunhai OA Intelligent Office Platform is aimed at the private and hybrid cloud market, providing open and secure enterprise-class cloud data center operation and maintenance management capabilities. SQL injection vulnerability exists in the Wave OA Office system, allowing attackers to...
Mastery OA /general/mytable/intel_view/video_file.php arbitrary File Download vulnerability
No description provided by source...
SQL Injection Vulnerability in OA System of Tianling Network Technology Co.
Tianling Network Technology Co., Ltd. has developed a business process software tool - myApps Rapid Development Platform, which provides customers with solutions for business process management consulting, planning, design, and training. A SQL injection vulnerability exists in the OA system of...
SQL Injection Vulnerability in the activityId Parameter of Jus OA System
Ninth OA system is the OA system to install, implement, learn, operate and maintain. There is a SQL injection vulnerability in the activityId parameter of the Ninth OA system. When Action is toNextActivity is, the activityId parameter is filtered to directly splice SQL statements, resulting in SQ...
XXE Vulnerability in Ninth OA System
Ninth OA system is the OA system to install, implement, learn, operate and maintain. Ninth OA system DocumentBuilder db = ex.newDocumentBuilder; Document doc = db.parserequest.getInputStream; XXE vulnerability exists. An attacker can read arbitrary files on the server and obtain sensitive...
Arbitrary File Read Vulnerability in Ninth OA System
Ninth OA system is the OA system to install, implement, learn, operate and maintain. An arbitrary file read vulnerability exists in the Jiushi OA system. It allows attackers to exploit the vulnerability to obtain sensitive information. The vulnerable URL is:...
SQL Injection Vulnerability in the getInfo Interface Function of Jiusi OA System
Ninth OA system is the OA system to install, implement, learn, operate and maintain. A SQL injection vulnerability exists in the Ninth OA System. The lack of filtering of the 'getInfo' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the database...
Ruvar OA系统 wf_get_fields_approve.aspx 参数template_id SQL注入漏洞
No description provided by source...
Mastery OA /inc/finger/use_finger. php file SQL injection vulnerabilities
No description provided by source...
Mastery OA /general/ems/manage/search_excel. php file SQL injection vulnerabilities
Width byte injection occurs the position is that PHP sends a request to the MYSQL character set to use the charactersetclient setting a value for an encoding, the GET parameters if it contains“%df%27”, addslashes encoded into‘\’ variable“%df%5c%27”, in MySQL in the processing use the gbk characte...
Small and micro OA office management system v2. 0 \Application\Home\Controller\TaskController.class.php parameters task_id SQL injection
No description provided by source...
Arbitrary File Download Vulnerability in Wando OA Professional Edition
Wando OA Professional is a comprehensive office system that combines the functions of collaboration software, portal, ERP, CRM, HR, finance, e-mail and video conferencing. The product has an arbitrary file download vulnerability, which can be exploited by an attacker to download any system file,...
Mastery OA /interface/go.php SQL injection vulnerability
No description provided by source...
Pan micro-OA system /web/broswer/SectorInfoBrowser. the jsp blind
No description provided by source...
Ruvar OA system WorkPlanAttachDownLoad. aspx parameters sys_file_storage_id SQL injection vulnerability
No description provided by source...
Kingdee OA Office system /stock/cash/tree/get_part. jsp file ids parameter SQL injection vulnerability
No description provided by source...
Kingdee OA /stock/cash/tree/get_mail. jsp parameter node injection vulnerability
No description provided by source...
Limits of the OA system /inc/finger/use_finger.php file USER_ID parameter SQL injection vulnerability
No description provided by source...