Arbitrary File Upload Vulnerability in Panavision OA System

Panavision OA Office System is a coordination office software. A SQL injection vulnerability exists in Panmicro OA Office System, which can be exploited by an attacker to obtain sensitive information from a website database...

万户OA某页面通用性SQL注入（影响N个政府网和医疗机构）

简要描述： 万户OA某页面通用性SQL注入（影响N个政府网和医疗机构） 详细说明： defaultroot/Logon.do 该页面存在越权访问，由于appinstanceid参数过滤不严，导致了SQL注入的产生 问题参数：appinstanceid EXP：defaultroot/Logon.do 利用方法：访问该页面，输入任意内容，抓包获取，SQLMAP跑之 涉及案例： ...:7001/defaultroot/aep/login.jsp http://.../defaultroot/aep/login.jsp http://...:7001/defaultroot/Logon.do...

Generalized Arbitrary File Download Vulnerability in Safi OA Management System

Safe OA management system is an office system developed by ASP.NET, and customers involved in medicine, finance, schools, administration and many other units. There is a generic arbitrary file download vulnerability in Safi OA Management System, which can be exploited by an attacker to download...

Multiple SQL Injection Vulnerabilities in Jinhe Collaboration Management Platform

Jinhe OA collaborative management platform using asp.net and sqlserver technology development, the use of many users. There are multiple SQL injection vulnerabilities in OA Collaboration Management Platform. Attackers are allowed to utilize common SQL injection tools to obtain sensitive database...

Multiple SQL Injection Vulnerabilities in Beijing Jinhe C6 Collaborative Management Platform

Jinhe OA is developed with asp.net and sqlserver technology and is used by many users. There are multiple SQL injection vulnerabilities in the OA system. However, these injections need to log in to the system to be able to use the OA system for sql filtering, but the filtering is not strict enoug...

上海泛微网络科技股份有限公司办公系统信息泄露

简要描述： 上海泛微网络科技股份有限公司自身的办公系统信息泄露 详细说明： 泛微也是使用自己开发的OA系统，目前版本是8.0，存在一处敏感文件未授权访问导致的员工组织架构泄漏风险。可被用来进行暴力破解等攻击。 测试时进行了简单的弱密码枚举，发现60多个员工的密码是123456 域名：www.e-cology.com.cn 存在问题的url: http://www.e-cology.com.cn/messager/users.data 该文件包含了所有员工的loginid、姓名、邮箱、手机号、职位等信息。loginid即是登录oa的用户名。 该问题进行了base64编码，内容如下： 解码后...

金蝶协同办公系统 GETSHELL漏洞

简要描述： 详细说明： 金蝶OA系统在web.xml中配置了一个servlet Connector，是基于旧版本的fckeditor，存在任意文件上传漏洞，配置如下： com.fredck.FCKeditor.connector.ConnectorServlet.class反编译出主要代码如下： public void doPostHttpServletRequest request, HttpServletResponse response throws ServletException, IOException …… String commandStr =...

华天动力OA系统弱口令加任意文件上传，分秒钟沦陷服务器

简要描述： 华天动力OA系统弱口令加任意文件上传，分秒钟沦陷服务器 详细说明： 华天动力OA系统默认存在弱口令用户，登录弱口令用户后可上传任意文件，直接拿shell,并且由于系统数据库是root，权限很高，服务器直接沦陷 漏洞证明： 1.下载华天最新版OA http://software.oa8000.com/download/Version/V7.0/11-TAMYSQL5D-%E8%AF%95%E7%94%A8%E7%89%88%E5%B8%A6%E6%95%B0%E6%8D%AE%E4%B8%89%E5%90%88%E4%B8%80MYSQLPUE-7.0-2015-06-29.e...

SQL Injection Vulnerability in Zixiang OA Office System/OpenWindows/Openleibie_zlMc.aspx?id=parameter

Zhixiang OA office system is an enterprise office system. A SQL injection vulnerability exists in the OpenWindows/OpenleibiezlMc.aspx?id= parameter of the Zhixiang OA Office System, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Zhixiang OA Office System/mainpage/msg.aspx?user=parameters

Zhixiang OA office system is an enterprise office system. A SQL injection vulnerability exists in the OpenWindows/OpenleibiezlMc.aspx?id= parameter of the Zhixiang OA Office System, which can be exploited by an attacker to obtain sensitive information from the database...

Unauthorized Operation Vulnerability in Panavision OA Office System

Panavision OA Office System is a coordination office software. An unauthorized operation vulnerability exists in Panmicro OA Office that could be exploited by an attacker to perform an unauthorized operation...

SQL Injection Vulnerability in the type parameter of Haitian OA System/ZhuanTi/DocMain.asp Page

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...

SQL Injection Vulnerability in OAID Parameter of Haitian OA System/Documents/OA_WordDocDisplay.asp Page

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...

某OA系统存在6处MSSQL注射漏洞

简要描述： 6处GET型注射 详细说明： 总是看到有人分开刷；我就不一一提交，打包好了！案例其实很多的；前人有一个列出比较多的案例；例如： WooYun: 某OA系统两处SQL注射到GetShell ；主要影响ZF、Edu、事业单位等... 厂商： http://www.haitiansoft.com:8080/ 海天OA移动办公软件 - 领先的协同办公管理系统解决方案专家 六处SQL注入点：（与乌云现有公开记录无重复） /UserInfor/UserInfor.asp?UserName=sa /UserInfor/BuMenDetail.asp?OAID=1...

通达OA系统存在SQL注入（无需登陆）

简要描述： RT 详细说明： 前人案例： http://wooyun.org/bugs/wooyun-2010-082959 注入链接： /general/score/flow/scoredate/result.php?FLOWID= 案例： http://122.144.134.79/general/score/flow/scoredate/result.php?FLOWID=11 http://www.ccas.com.cn:8008/general/score/flow/scoredate/result.php?FLOWID=11...

53kf多站点配置不当导致整站可下载

简要描述： 详细说明： http://oa1.53kf.com/.svn/entries http://test2.53kf.com/.svn/entries http://test4.53kf.com/.svn/entries SVN泄露可导致整站下载 其中一个是OA系统 其他两个看源码疑似管理系统 漏洞证明： http://oa1.53kf.com/.svn/entries http://test2.53kf.com/.svn/entries http://test4.53kf.com/.svn/entries SVN泄露可导致整站下载 其中一个是OA系统 其他两个看源码疑似管理系统...

某OA系统高危漏洞无需登陆Getshell

简要描述： 危害比较大把 详细说明： 我这个说的是前台无需登录的，前人好像说要注入后登录其实构造表单就可以了 海天OA官网：http://www.haitiansoft.com:8080/ 存在一处不需要登录就可以getshell的高危漏洞！ Upload bug: None...

通达oa2013集团版技巧性SQL注入

简要描述： 又是通达 详细说明： 官网demo登录试用: http://www.day900.com 注入点: http://www.day900.com/general/mytable/intelview/workflow.php?MAXCOUNT=15&TYPE=3&MODULESCROLL=false&MODULEID=55&MODULEID=Math.random 加单引号后: 请联系管理员 错误1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL...

通达OA2013集团版SQL注入+root

简要描述： dd 详细说明： http://www.tongda2000.com/oa/group/ 试用登录 http://www.day900.com/ 注入点：...

某学校综合管理系统通用SQL注入漏洞

简要描述： 某学校综合管理系统通用SQL注入漏洞 详细说明： 系统名称：学校综合管理平台 厂商：上海安脉计算机科技有限公司 关键字：版权所有：上海安脉计算机科技有限公司 系统架构：ASPX+MSSQL 漏洞文件：OA/usecar/carStat.aspx 注入参数：startdate 枚举部分案例： http://anmai.net:81/OA/usecar/carStat.aspx http://jwxx.am.jsedu.sh.cn/ANMAI/OA/usecar/carStat.aspx http://bssyxxgl.eicbs.com/OA/usecar/carStat.as...