1583 matches found
通达OA系统xss漏洞攻击成功可登陆他人邮件
简要描述： 描述不能太详细，因为来这里的人都很NB 详细说明： 中国兵器工业信息中心出品的office anywhere 深受国内各大政企及军队/武警/公安等敏感部门宠爱。官网介绍现有客户13601家，覆盖300万台终端。很遗憾的是该系统邮件功能部分存在存储型xss，由于邮件默认直接显示内容，极易触发，成功利用可非法登录，导致企业内部敏感信息泄漏，甚至是进一步网络渗透。 利用过程：向该oa用户邮箱内发送含有恶意js代码的邮件。over！ 漏洞证明： 利用搞到的cookie成功登录： 这个跨站漏洞是企业间谍获取竞争对手敏感信息的一道捷径，考虑下多给rank：）...
通达OA系统过滤机制不够严谨导致服务器沦陷！
简要描述： 通达OA系统过滤机制不够严谨，导致服务器沦陷！ 详细说明： 通达OA系统过滤机制不够严谨，导致服务器沦陷！ 服务器沦陷 漏洞证明： 通达OA系统官方演示系统 URL = http://t9.go2oa.com 利用试用账户登录进去 在控制面板- 昵称与头像 - 上传 可上传任意文件。 上传SELL -- url = http://t9.go2oa.com/t9/attachment/avatar/1122.jsp shell 没有删除。你们去删除吧。 在shell里可执行cmd命令！ netstat -an 远程桌面端口 3399 服务器为毛装 数字安全？？...
大量致远OA默认口令并且公网开放
简要描述： 这款oa销量很广啊，弱口令什么的最可爱了，没技术含量，不赚功劳，只赚苦劳。看之前的一个系统给了rank11，我多几个，要个15不过分吧。 详细说明： 大量弱口令，两种，一种是sysytem，system，另一种是seeyoon，seeyoon。 漏洞证明： 网速太慢，不上图了，直接加上链接，管理员自行核实。 http://oa.shuanglun.com/yyoa/index.jsp 双轮酒业 http://122.158.251.34:8080/yyoa/ 集贤县农村信用合作社...
通达OA微讯功能持久性XSS漏洞
简要描述： 通达oa的微讯功能，可以时时发送信息给在线的用户不在线的用户当登录时即可收到，信息中可以插入脚本代码，当发送信息给指定的用户时，对方会立刻接收到信息，可能造成cookie被盗，以及执行某些操作，如自动发布分享，添加日志，删除日志等操作。 详细说明： 测试的版本是office anywhere 2011 漏洞证明： 微讯发送后的效果，发现并没有弹出对画框。 通过burp suite看是某些符号在输入的时候被转译了 尝试把被转译后的符号修改回来后再次发送 修改数据包后再次发送的效果图如下：...
通达OA，邮件持久型XSS，可射全公司
简要描述： 通达OA，邮件收件人可插入XSS，可射全公司。 详细说明： 通达OA，邮件收件人可插入XSS，可发送邮件给全公司，添加xss的收件人，查收即xss，收件人显示X，一般不看源码不注意。测试版本Office Anywhere 2013。 漏洞证明： 通达OA，邮件收件人可插入XSS，可发送邮件给全公司，添加xss的收件人，查收即xss，收件人显示X，一般不看源码不注意。...
用友致远A6协同管理SQL注射漏洞
简要描述： 用友致远A6协同管理SQL注射漏洞，需登录账户。 详细说明： 注入发生在searchresult.jsp文件中的docTitle参数 http://xxxxxx.com/yyoa/oaSearch/searchresult.jsp?docType=协同信息&docTitle=1'and//1=2// union//all//select//user,2,3,4,5%23&goal=1&perId=0&startTime=&endTime=&keyword=&searchArea=notArc 查询表名： http:// xxxxxx.com...
Mastery OA contents of the log stored XSS can get the cookie-vulnerability warning-the black bar safety net
Mastery OA2013 and 2 0 1 0 version, Office Anywhere 2 0 1 3 work log edit page there is the storage typeXSS, and their superiors view the log after you can steal the cookie 1, the work log edit page source code to bypass the bypass a character can be constructedXSS! ! ! 1, the interception to giv...
TDXK OA 2011 misc2.php SQL注入漏洞
No description provided by source...
夏茂政府网集成OA办公系统 2.0 HXINCLUDE/Admin_Upfile.asp 后门
No description provided by source...
Xia Mao government integrated OA full open source version of the built-in Backdoor-vulnerability warning-the black bar safety net
The source code to download address http://www.mycodes.net/25/2177.htm Back door file: HXINCLUDE/AdminUpfile. asp %Response. Buffer=TrueServer. ScriptTimeOut=9999999OnErrorResumeNext%! DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"...
WanHu ezoffice upload arbitrary file vulnerability-vulnerability warning-the black bar safety net
Brief description: Thousand oa system to publish announcements of the image upload control is not strict, cause you can upload any files! Detailed description: Open the announcement in the upload pictures page view the url as follows:...
CVE-2012-0128
HP Onboard Administrator (OA) before version 3.50 is vulnerable to a web-redirect/phishing flaw that could allow remote attackers to redirect users to arbitrary sites via unspecified vectors. The CVE entry (CVE-2012-0128) is documented with a CVSS v2 base score of 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)...
CVE-2012-0129
HP Onboard Administrator (OA) before version 3.50 is affected by CVE-2012-0129, which allows remote attackers to bypass access restrictions and execute arbitrary code via unspecified vectors. The issue is documented with a CVSSv2 base score of 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C). Public discussions ...
CVE-2012-0130
HP Onboard Administrator (OA) prior to version 3.50 is affected by CVE-2012-0130, which allows remote attackers to obtain sensitive information via unspecified vectors. Related advisories also reference CVE-2012-0128 and CVE-2012-0129 as part of the same OA vulnerability set. CVSS base score for ...
PT-2012-2333
Name of the Vulnerable Software and Affected Versions HP Onboard Administrator OA versions prior to 3.50 Description The issue allows remote attackers to bypass intended access restrictions and execute arbitrary code. Recommendations For HP Onboard Administrator OA versions prior to 3.50, update ...
CVE-2012-0128: Improper Input Validation
HP Onboard Administrator OA before 3.50 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2012-0129: Undefined Security Weakness
HP Onboard Administrator OA before 3.50 allows remote attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors...
CVE-2012-0130: Exposure of Sensitive Information to an Unauthorized Actor
HP Onboard Administrator OA before 3.50 allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2011-3155
HP Onboard Administrator (OA) versions 3.21–3.31 are affected by CVE-2011-3155, a remote unauthorized access vulnerability that could bypass access restrictions via unknown vectors. The NVD entry states a CVSS v2 base score of 6.4 (NETWORK, LOW attack complexity, NONE authentication, partial conf...
CVE-2011-3155: Undefined Security Weakness
Unspecified vulnerability in HP Onboard Administrator OA 3.21 through 3.31 allows remote attackers to bypass intended access restrictions via unknown vectors...