1583 matches found
Command Execution Vulnerability in Xinhuo OA Office System (CNVD-2021-52069)
Xinhu OA office system is a free and open source office OA system. Xinhao OA Office System has a command execution vulnerability that can be exploited by an attacker to gain control of the server...
Command Execution Vulnerability in Xinhuo OA Office System
Xinhu OA office system is an open source online office system. A command execution vulnerability exists in Xinhuo OA Office System, which can be exploited by a remote attacker to submit a special request that can execute arbitrary commands and gain shell privileges on the host...
Arbitrary File Write Vulnerability in Panavision OA E-office
Panmicro OA E-office system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...
Command execution vulnerability in Zhiyuan OA (CNVD-2021-51370)
Zhiyuan OA is a collaborative management software, a digital collaborative operation platform for medium-sized and large group organizations. A command execution vulnerability exists in Zhiyuan OA, which can be exploited by an attacker to execute arbitrary commands...
OA System Logic Flaw Vulnerability of Shenzhen Lanling Software Co.
Founded in 2001, Shenzhen Lanling Software Co., Ltd. is a leader in ecological OA and a professional service provider of digital work. There is a logic flaw vulnerability in the OA system of Shenzhen Lanling Software Co., Ltd, which can be exploited by attackers to obtain sensitive information...
Command Execution Vulnerability in Digital OA (EKP) at Shenzhen Lanling Software Co.
Ltd. was founded in Shenzhen Science and Technology Park in 2001. BlueLine is a well-known large platform OA service provider and a leading knowledge management solution provider in China, and is a national high-tech enterprise specializing in knowledge-based consulting, software development,...
SQL Injection Vulnerability in OA System of Xi'an Qilai Software Technology Co.
Huatian Synergy is China's collaborative management software provider, collaborative oa management software industry implementation success rate brand, is the domestic focus on collaborative software development and application of the main software vendors. There is a SQL injection vulnerability ...
泛微OA weaver.common.Ctrl 任意文件上传漏洞
...
Arbitrary File Read Vulnerability in BlueLine's New Generation Digital OA (Large and Medium Enterprises) EKP
Shenzhen BlueLine Software Co., Ltd. is a well-known large-platform OA service provider and a leading knowledge management solution provider in China, which is a national high-tech enterprise specializing in knowledge-based consulting, software R&D, implementation and technical services for...
Command Execution Vulnerability in Soft Rainbow OA Office Platform
Ltd. has been committed to providing all-round solutions, including products, consulting, development, engineering and services, for the government, enterprises and institutions, especially for the domestic large and medium-sized financial enterprises to manage informationization. A command...
CVE-2020-18019
SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "modeworcAction.php" component...
Sql injection
SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "modeworcAction.php" component...
CVE-2020-18019
CVE-2020-18019: Xinhu OA System v1.8.3 contains an SQL injection in the typeid parameter of the createfolderAjax function (mode_worcAction.php). The root cause is unvalidated input allowing arbitrary commands to be injected, leading to unauthorized access to sensitive information. Reported impact...
CVE-2020-18019
SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "modeworcAction.php" component...
信呼 Rockoa Xinhu SQL注入漏洞
Rockoa Xinhu is a Php-based office OA system from China Xinhu Rockoa. A SQL injection vulnerability exists in Xinhu OA System v1.8.3, which allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "createfolderAjax" function of the "mode worcAction.php"...
PT-2021-10117
Name of the Vulnerable Software and Affected Versions: Xinhu OA System version 1.8.3 Description: The issue allows remote attackers to obtain sensitive information by injecting arbitrary commands into the typeid variable of the createfolderAjax function in the mode worcAction.php component. This...
CVE-2020-18019: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "modeworcAction.php" component...
Command Execution Vulnerability in Panavision OA
Panmicro OA is a standard version of the Panmicro Collaboration Office System program, which can provide users with a collaborative, integrated office environment. A command execution vulnerability exists in OA, which can be exploited by an attacker to gain control of the server...
Directory Traversal Vulnerability in Qilai OA of Xi'an Huatian Synergy Information Technology Co.
Xi'an Huatian Synergy Information Technology Co., Ltd. is China's collaborative management software provider, collaborative oa management software industry implementation success rate brand, is the domestic focus on collaborative software development and application of the main software vendors...