Cybozu Garoon Information Disclosure Vulnerability (CNVD-2022-54342)

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, E-mail, bookmark, scheduler, bulletin board, document management, etc. Cybozu Garoon is vulnerable to an information disclosure vulnerability, which is caused by excessive data output from the...

oasys SQL Injection Vulnerability

oasys is an OA office automation system. oasys is vulnerable to SQL injection, and no details of the vulnerability are currently available...

CVE-2021-40644

An SQL Injection vulnerability exists in oasys oasystem as of 9/7/2021 in resources/mappers/notice-mapper.xml...

JFinalOA SQL注入漏洞

JFinalOA is an enterprise office system developed based on the JFinal framework.JFinalOA has a SQL injection vulnerability that can be exploited by attackers to execute arbitrary SQL statements...

PT-2022-11286

Name of the Vulnerable Software and Affected Versions oasys oa system affected versions not specified Description An SQL Injection issue exists in the resources/mappers/notice-mapper.xml file of oasys oa system as of 9/7/2021. Recommendations At the moment, there is no information about a newer...

Heartland OA2021 Winter Snow Edition suffers from a logic flaw vulnerability (CNVD-2022-13942)

Heartland OA is developed based on the SaaS architecture of cloud computing model to meet the needs of government cloud, industrial cloud, education cloud and other intelligent cloud platform construction. A logic flaw vulnerability exists in Heartland OA2021 Winter Snow Edition, which can be...

Command Execution Vulnerability in Panavision OA (CNVD-2022-06870)

Ltd. specializes in the field of collaborative management OA software, and is committed to collaborative OA as the core to help enterprises build a new mobile office platform. A command execution vulnerability exists in Panmicro OA, which can be exploited by an attacker to gain control of the...

Lemon OA Cross-Site Scripting Vulnerability

Lemon OA is an open source office OA system developed by XuHuisheng personal developer using the Java language.Lemon OA V1.10.0 version of the Editing component has a security vulnerability that can be exploited by attackers to execute arbitrary web scripts or HTML...

OPMS Cross-site Request Forgery Vulnerability

OPMS is an OA management system. v1.3 and previous versions of OPMS contain a security vulnerability that can be exploited to add arbitrary user accounts via /user/add...

Lemon OA Cross-Site Scripting Vulnerability (CNVD-2021-103397)

Lemon OA is an open source office OA system developed by XuHuisheng personal developer using the Java language.Lemon OA version V1.10.0 has a security vulnerability that originates from the potrtalItemName parameter in webPortalController.java. An attacker can use the vulnerability to execute...

Lemon OA 跨站脚本漏洞

Lemon OA is an open source office OA system developed by XuHuisheng personal developer using the Java language.Lemon OA version V1.10.0 has a security vulnerability that originates from the potrtalItemName parameter in webPortalController.java. An attacker can use the vulnerability to execute...

Heartland OA2021 Winter Snow Edition has a logic flaw vulnerability

Heartland OA is developed based on the SaaS architecture of cloud computing model to meet the needs of government cloud, industrial cloud, education cloud and other intelligent cloud platform construction. A logic flaw vulnerability exists in Heartland OA 2021 Winter Edition, which can be exploit...

File Upload Vulnerability in Heartland OA 2021 Autumn Solid Edition (CNVD-2021-89119)

Mindtone OA is an oa office tool equipped with AI artificial intelligence. A file upload vulnerability exists in Heartland OA 2021 Autumn Edition, which can be exploited by attackers to gain control of the server...

File upload vulnerability exists in Heartland OA 2021 Autumn Solid Edition (CNVD-2021-89120)

Mindtone OA is an oa office tool equipped with AI artificial intelligence. A file upload vulnerability exists in Heartland OA 2021 Autumn Edition, which can be exploited by attackers to gain control of the server...

File Upload Vulnerability in Heartland OA 2021 Autumn Edition

Mindtone OA is an oa office tool equipped with AI artificial intelligence. A file upload vulnerability exists in Heartland OA 2021 Autumn Edition, which can be exploited by attackers to gain control of the server...

Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-88667)

HeartTone OA is an oa office tool equipped with AI artificial intelligence. Heart to OA 2021 Autumn real version there is a file upload vulnerability, attackers can use the vulnerability to gain control of the server...

Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-88620)

HeartTone OA is a versatile and intelligent office application. Heart to Heart OA 2021 Autumn Real Edition has a file upload vulnerability, which can be exploited by attackers to gain control of the server...

Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-86865)

HeartTone OA is a multifunctional intelligent office application. Heart to Heart OA 2021 Autumn Real Edition has a file upload vulnerability, which can be exploited by attackers to gain control of the server...

Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-88619)

HeartTone OA is an oa office tool equipped with AI artificial intelligence. Heart to OA 2021 Autumn real version there is a file upload vulnerability, attackers can use the vulnerability to gain control of the server...

File Upload Vulnerability in Heartland OA2021 Autumn Edition

Mindtone OA is an oa office tool equipped with AI artificial intelligence. A file upload vulnerability exists in Heartland OA 2021 Autumn Edition, which can be exploited by an attacker to gain control of the server...