Stored Cross-Site Scripting Vulnerability in Heartland OA

Heartland OA is a multi-functional and intelligent office application. A stored cross-site scripting vulnerability exists in Heartland OA. An attacker can exploit the vulnerability to obtain an administrator cookie...

SQL Injection Vulnerability in Ac***.php File of Xinhuo OA Office System

Xinhu OA office system is an open source online office system. The Ac.php file of Xinhao OA Office System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-7580

A vulnerability has been identified in SIMATIC Automation Tool All versions V4 SP2, SIMATIC NET PC Software V14 All versions V14 SP1 Update 14, SIMATIC NET PC Software V15 All versions, SIMATIC NET PC Software V16 All versions V16 Upd3, SIMATIC PCS neo All versions V3.0 SP1, SIMATIC ProSave All...

File Upload Vulnerability in Tianjian OA

Tianjian OA is a collaborative office system that focuses on healthcare. A file upload vulnerability exists in Tianjian OA, which can be exploited by attackers to upload malicious files and obtain server administrative privileges...

SQL injection vulnerability in Tongda oa system (CNVD-2020-31075)

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a front-end SQL injection...

Cross site scripting

A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow Reflected Cross Site Scripting. HPE has made the following software updates and mitigation information to resolve the vulnerability in HPE Onboard...

Arbitrary File Deletion Vulnerability in Bitter Chrysanthemum OA

Bitter Chrysanthemum OA office system is a general-purpose collaborative OA management software for small and medium-sized enterprises. Bitter Daisy OA arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete any server file...

SQL Injection Vulnerability in the OA System of Shenzhen Boshi Xiechuang Network Technology Co.

Ltd. was founded in 2012, is China's largest open source collaboration management product development, services and solutions provider. There is a SQL injection vulnerability in the OA system of Shenzhen Boosi Xiechuang Network Technology Co., Ltd, which can be exploited by an attacker to obtain...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24725)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24722)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office systems, mobile OA applications and other collaborative OA solutions fo...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24724)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24728)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Unauthorized Access Vulnerability in Tongda OA

Tongda OA is a collaborative office automation software. Tongda OA has an unauthorized access vulnerability that can be exploited by attackers to bypass login and directly enter the background...

Command Execution Vulnerability in Tongda OA

Tongda OA is a collaborative office automation software. A command execution vulnerability exists in Tongda OA, which can be exploited by an attacker to execute arbitrary commands...

File Upload Vulnerability in Born Creative OA System

Born Creative OA office system for the first domestic open source OA software producers, using the leading B / S architecture, cross-platform language php + mysql and other flexible applications, is one of China's most extensive user base of OA software. Born Creative OA system file upload...

File upload vulnerability in Up***.php file of Bitter Chrysanthemum OA Office System

Bitter Chrysanthemum OA office system is suitable for small and medium-sized enterprises, general-purpose collaborative OA management software, incorporating Bitter Chrysanthemum OA's rich experience in management software development for a long time and advanced technology, the system adopts the...

oa-cagliari.inaf.it Cross Site Scripting vulnerability

Security Researcher fakessh Helped patch 1840 vulnerabilities Received 9 Coordinated Disclosure badges Received 60 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting oa-cagliari.inaf.it website and its users. Following...

SQL Injection Vulnerability in Panmicro e-cology OA System

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...

Red Sail OA system has SQL injection vulnerability

Redfan OA is based on SOA architecture, with EIP enterprise information portal and BPM business process engine as the core. Red Sail OA system has SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Zhiyuan OA suffers from an arbitrary file download vulnerability (CNVD-2019-46774)

Zhiyuan OA is an office system developed by Beijing Zhiyuan Internet Software Co. There is an arbitrary file download vulnerability in Zhiyuan OA, which can be exploited by attackers to download arbitrary files...