File Upload Vulnerability in Heartland OA2021 Autumn Edition

Mindtone OA is an oa office tool equipped with AI artificial intelligence. A file upload vulnerability exists in Heartland OA 2021 Autumn Edition, which can be exploited by an attacker to gain control of the server...

SQL injection vulnerability exists in Tongda OA (CNVD-2021-73171)

OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Xinke Technology Co. There is a SQL injection vulnerability in Tongda OA, attackers can use the vulnerability to obtain sensitive information in the databas...

Cybozu Garoon Full Text Search Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Full Text Search in Cybozu Garoon, a portal-based OA system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

Cybozu Garoon View Restriction Bypass Vulnerability

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. A view restriction bypass vulnerability exists in the Portal in Cybozu Garoon. An attacker can use this vulnerability to obtain data from the portal without viewing privileges...

Cybozu Garoon E-mail Incorrect Input Verification Vulnerability

Cybozu Garoon is a portal type OA office system of Cybozu Japan. A security vulnerability exists in e-mail in Cybozu Garoon. The vulnerability can be exploited by an attacker to alter e-mail data without proper privileges...

Cybozu Garoon Workflow Incorrect Input Validation Vulnerability

A security vulnerability exists in Workflow in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to change workflow data without proper privileges...

Cybozu Garoon E-mail Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in e-mail in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change e-mail data without proper privileges...

Cybozu Garoon Message Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Message in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

Cybozu Garoon message deletion vulnerability

A message deletion vulnerability exists in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to delete workflow routing information without the appropriate privileges...

Cybozu Garoon Bulletin Operational Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in Bulletin in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change the data in the bulletin without proper privileges...

Cybozu Garoon Portal Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in the Portal of Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change the data of the portal without proper privileges...

Cybozu Garoon User Profile Incorrect Input Validation Vulnerability

A security vulnerability exists in the User Profile of Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to change data in the user profile without proper privileges...

Cybozu Garoon Bulletin Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Bulletin in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

Cybozu Garoon Message Cross-Site Request Forgery Vulnerability

A cross-site request forgery vulnerability exists in Message in Cybozu Garoon, a portal-based OA system from Cybozu Japan. An attacker could use this vulnerability to trick users into performing unintended actions...

SQL Injection Vulnerability in Tongda OA Version 11.10 Server Side

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

SQL Injection Vulnerability in Qilai OA Cl***.aspx File

Xi'an Huatian Synergy Information Technology Co., Ltd. is a company whose business scope includes: sales of computer software and hardware, computer network engineering, design of security monitoring engineering, etc.. A SQL injection vulnerability exists in the Qilai OA Cl.aspx file, which can b...

SQL Injection Vulnerability in Qilai OA

Xi'an Qilai Software Technology Co., Ltd. is an IT service provider of R&D and implementation of industry-applied collaborative OA management software, and is the only OA software vendor in China that provides copyright-free OEM authorization and provides registered programs. A SQL injection...

Arbitrary File Deletion Vulnerability in Panavision OA E-office

Panavision OA E-office is a professional office software, a working platform for small businesses or teams. An arbitrary file deletion vulnerability exists in Panmicro OA E-office, which can be exploited by an attacker to delete arbitrary files from the server...

Arbitrary file write vulnerability in Panavision OA E-office (CNVD-2021-55394)

Panavision OA E-office is a professional office software, a working platform for small businesses or teams. An arbitrary file write vulnerability exists in Panavision OA E-office, which can be exploited by an attacker to gain server control privileges...

Arbitrary File Write Vulnerability in Panavision OA E-office

Panavision OA E-office is a professional office software, a working platform for small businesses or teams. An arbitrary file write vulnerability exists in Panavision OA E-office, which can be exploited by an attacker to gain server control privileges...