1358 matches found
Kingdee OA Office system /stock/flow_design/flow_class_custom_add. jsp file class_id parameter SQL injection vulnerability
No description provided by source...
JINGLUN OA system /Systems/code/Code_edit. aspx file ChannelId parameter SQL injection vulnerability
No description provided by source...
Pan micro-OA /ws/query database operation
No description provided by source...
The vulnerability of the automated system for managing technological processes of SIMATIC WinCC OA allows a malicious individual to execute arbitrary codes without going through authentication procedures.
The vulnerability of the SIMATIC Winn CC OAM software relates to errors that occur when processing specially crafted TCP packets. Exploiting this vulnerability allows a malicious individual to execute arbitrary code by sending specially crafted packets to port 4999...
The vulnerability of the automated system for managing technological processes of SIMATIC WinCC OA allows a malicious individual to bypass the file system without going through the authentication procedures as a regular user.
The vulnerability of the SIMATIC WinCC OA software is related to errors that occur when processing specially crafted TCP packets. Exploiting this vulnerability allows a malicious individual to bypass the file system on the server in the context of the current user, without going through the...
Source day software OA Office system com. velcro. base. GetDataAction parameters formid SQL injection vulnerability
No description provided by source...
JINGLUN OA system /Systems/user_priv/manage. aspx file id parameter SQL injection vulnerability
No description provided by source...
stock OA Office system /stock/control/netcom_out_rfile_submit. jsp, etc. 4 SQL injection vulnerability
No description provided by source...
Dimensions OA system notes.php parameter nid SQL injection vulnerability
No description provided by source...
Sunlinks OA系统 /Common/HRManage/UserList.aspx?Retire=0&Code= 越权访问漏洞
No description provided by source...
JINGLUN OA system /Systems/user_priv/manage. aspx parameter id SQL injection vulnerability
No description provided by source...
Mastery OA system /general/document/index. php/recv/register/turn parameter rid of the SQL injection vulnerability
http://xxx/general/document/index.php/recv/register/turn post:SERVER=&rid=expselectfromselect concat0x7e7e7e,@@version,0x7e7e7e from user limit 0,1x...
用友oa /yyoa/checkWaitdo.jsp 注入漏洞
No description provided by source...
泛微OA系统 /meeting/Maint/MeetingTypeCheck.jsp 参数id 时间盲注
版本：6.0，7.0，7.100 存在漏洞的文件： /meeting/Maint/MeetingTypeCheck.jsp 该文件接收2个参数：typename、id 测试发现如果数据库是oracle，则两个参数均可注入，如果数据库是mssql，则只有参数id可注入。 代码： 可以看到参数typename和id都未进行额外的处理，直接拼接到sql语句中执行了。 google关键字： intitle:泛微协同商务系统 inurl:login 等关键字可搜出不少来。...
万户办公OA平台 jigeObj.jsp 参数RecordID SQL注入漏洞
No description provided by source...
双杨OA系统 pdflist.aspx 参数info_id SQL注入漏洞
No description provided by source...
源天(Velcro)协同OA /ServiceAction/com.velcro.base.DataAction?sql= SQL语句执行漏洞
ServiceAction/com.velcro.base.DataAction?sql=|20select|20categoryids|20from|20project|20where|20id=%27%27%20and%201=2%20union%20all%20select%20select%20banner%20from%20sys.v$version%20where%20rownum=1%20from%20dual&isworkflow=trueE 任意SQL语句执行...
源天(Velcro)协同OA /ServiceAction/com.velcro.base.GetDataAction formid SQL注入漏洞
No description provided by source...