1583 matches found
Design/Logic Flaw
A vulnerability has been identified in SIMATIC WinCC OA UI for Android All versions V3.15.10, SIMATIC WinCC OA UI for iOS All versions V3.15.10. Insufficient limitation of CONTROL script capabilities could allow read and write access from one HMI project cache folder to other HMI project cache...
CVE-2018-4844
A vulnerability has been identified in SIMATIC WinCC OA UI for Android All versions V3.15.10, SIMATIC WinCC OA UI for iOS All versions V3.15.10. Insufficient limitation of CONTROL script capabilities could allow read and write access from one HMI project cache folder to other HMI project cache...
CVE-2018-4844
A vulnerability has been identified in SIMATIC WinCC OA UI for Android All versions V3.15.10, SIMATIC WinCC OA UI for iOS All versions V3.15.10. Insufficient limitation of CONTROL script capabilities could allow read and write access from one HMI project cache folder to other HMI project cache...
CVE-2018-4844
Siemens SIMATIC WinCC OA UI for Android and iOS (versions before 3.15.10) contains an improper access control vulnerability. Insufficient limitation of CONTROL script capabilities allows read/write access from one HMI project cache folder to other HMI project cache folders within the app’s sandbo...
ICSA-18-081-01 Siemens SIMATIC WinCC OA UI Mobile App
CVSS v3 5.1 ATTENTION: Exploitable from an adjacent network. Vendor: Siemens Equipment: SIMATIC WinCC OA UI mobile app Vulnerability: Improper Access Control AFFECTED PRODUCTS Siemens reports that this vulnerability affects the following products: SIMATIC WinCC OA UI for Android: All versions pri...
CVE-2018-4844: Improper Access Control
A vulnerability has been identified in SIMATIC WinCC OA UI for Android All versions V3.15.10, SIMATIC WinCC OA UI for iOS All versions V3.15.10. Insufficient limitation of CONTROL script capabilities could allow read and write access from one HMI project cache folder to other HMI project cache...
华天动力OA系统登陆表单某参数可导致xss漏洞
0x00 首先随便找一个，OA系统， 可以去官网 http://www.oa8000.com/ 在线试用demo 或者 Google：inurl:"oaapp/webobjects/oaapp.woa/wo" 找一个 0x01 到登陆页面 /OAapp/WebObjects/OAapp.woa 表单随便填，然后抓包 11.16 和 11.18 两个参数均可利用 修改post数据: 0x02 不仅可POST提交这些参数，GET也同样可以...
SQL Injection Vulnerability in Xiaowei OA v2.0
Xiaowei OA system is Beijing Xiaowei Help Technology Co., Ltd. to provide mobile office platform for small and medium-sized enterprises. SQL injection vulnerability exists in Xiaowei OA v2.0, which can be exploited by attackers to obtain sensitive information from the database...
The likelihood of collaborative oa \app\oa\block\control.php SQL injection
No description provided by source...
SQL Injection Vulnerability in Lazy WorkPass OA Web Intelligent Office System
Lazy work pass OA network intelligent office system is suitable for enterprises and institutions of the general network office software, the system uses B / S operation mode, free version for small and medium-sized enterprises. There is a SQL injection vulnerability in the OA Network Intelligent...
SQL Injection Vulnerability in Ranchi OA System Version 4.2 Order Parameters
Ranzhi OA system is a collaborative office system for small and medium-sized enterprises, which includes functional modules such as customer management crm, sales tracking, daily office and other functions OA office system, bookkeeping software and knowledge management system. A SQL injection...
Reflected Cross-site Scripting Vulnerability in the Commondownloadtype Parameter of Zhiyuan OA System
Zhiyuan A6-m Collaborative Management Software Enterprise Edition is a collaborative management software for small and medium-sized enterprises, Zhiyuan A6-s Collaborative Management Software is a set of collaborative office management software that can help small and micro-organizations of...
oboa.on.ca XSS vulnerability
Open Bug Bounty ID: OBB-210778 Description| Value ---|--- Affected Website:| oboa.on.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Ruvar OA system wf_work_print. aspx the parameter idlist SQL injection vulnerability
No description provided by source...
Sea days OA system MessageInfoDis. asp parameters VOID SQL injection vulnerability
No description provided by source...
Mastery oa 2015 \inc\common.inc.php approve_finish function injection vulnerability
Recently made public measured when encountered on a system, The 2015 version of the latest update date: 2016-07-22 Injection the analysis \inc\common.inc.php ? php function SecureRequest&$var if isarray$var foreach $var as $k = $v $var$k = securerequest$v; else if 0 strlen$var &&...
SQL Injection Vulnerability in the ywonlyflag Parameter of VOA (Pengwei) System
Shenzhen Pengwei Information Technology Co., Ltd VOA collaborative office platform is a kind of asp development OA system. VOA Pengwei system ywonlyflag parameter exists SQL injection vulnerability, the vulnerability URL is...
Mastery OA /pda/apps/report/getdata.php arbitrary file upload
No description provided by source...
SQL Injection Vulnerability in Wave OA Intelligent Office Platform
Longchamp Yunhai OA Intelligent Office Platform is aimed at the private and hybrid cloud market, providing open and secure enterprise-class cloud data center operation and maintenance management capabilities. SQL injection vulnerability exists in the Wave OA Office system, allowing attackers to...