CVE-2022-3467

A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The manipulation of the argument inforid leads to sql injection. The exploit has been disclosed to the public and may be used...

Sql injection

A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The manipulation of the argument inforid leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2022-3467 Jiusi OA hntdCustomDesktopActionContent sql injection

A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The manipulation of the argument inforid leads to sql injection. The exploit has been disclosed to the public and may be used...

PT-2022-22282 · Jiusi Oa · Jiusi Oa

Name of the Vulnerable Software and Affected Versions: Jiusi OA affected versions not specified Description: A critical vulnerability was found in Jiusi OA, affecting an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The manipulation of the inforid argument leads to SQL...

CVE-2022-3467

CVE-2022-3467 affects Jiusi OA. SQL injection in /jsoa/hntdCustomDesktopActionContent via the inforid parameter (unknown functionality) with public exploit; CVSS v3.1 metrics show high impact (confidentiality/ integrity/ availability) and a base score of 9.8. No explicit remediation/version detai...

File upload vulnerability exists in Tongda OA (CNVD-2022-70712)

Tongda OA is a mobile intelligent office application. There is a file upload vulnerability in Tongda OA, which can be exploited by attackers to gain control of the server...

Shenzhen Lanning Software Co., Ltd. has SQL injection vulnerability in Lanning Intelligent Collaboration Platform

Shenzhen Lailing Software Co., Ltd. is a well-known large platform OA service provider and a leading knowledge management solution provider in China. It is a national high-tech enterprise specializing in knowledge-based consulting, software development, implementation and technical services for...

CVE-2022-36606

Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database...

CVE-2022-34924

Lanling OA Landray Office Automation OA internal patch number 133383/137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp...

Design/Logic Flaw

Lanling OA Landray Office Automation OA internal patch number 133383/137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp...

CVE-2022-34924

CVE-2022-34924 affects Lanling OA Landray Office Automation (OA). The vulnerability is an arbitrary file read located in the component /sys/ui/extend/varkind/custom.jsp, as described across multiple sources (NVD/Red Hat/CVE list). The available documents do not specify a patch version or remediat...

Huatian Power OA system arbitrary file upload vulnerability

Huatian Dynamics OA System is a collaborative office software developed by Dalian Huatian Software Co. There is an arbitrary file upload vulnerability in Huatian Power OA system, which can be exploited by attackers to upload arbitrary files to the server...

PT-2022-22436 · Landray · Lanling Oa Landray Office Automation

Name of the Vulnerable Software and Affected Versions: Lanling OA Landray Office Automation OA affected versions not specified Description: The issue is related to an arbitrary file read vulnerability. It affects the component /sys/ui/extend/varkind/custom.jsp. There is no information provided...

Huatian Power collaborative OA office system has information leakage vulnerability

Dalian Huatian Software Co., Ltd. is an OA software and solution provider. An information leakage vulnerability exists in Huatian Power Collaborative OA Office System, which can be exploited by attackers to obtain sensitive information...

Cybozu Garoon License Issue Vulnerability (CNVD-2022-69536)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon. The vulnerability stems from improper privilege...

Siemens WinCC OA 3.16 < 3.19 Client Side Authentication Vulnerability (SSA-111512)

Binary data scadaappsiemenswinccoassa-111512icefall.nbin...

CISA Releases Security Advisories Related to OT:ICEFALL (Insecure by Design) Report

CISA is aware that Forescout researchers have released OT:ICEFALL, a report on 56 vulnerabilities caused by insecure-by-design practices in operational technology across multiple vendors. The vulnerabilities are divided into four main categories: insecure engineering protocols, weak cryptography ...

CVE-2022-33139

A vulnerability has been identified in Cerberus DMS All versions, Desigo CC All versions, Desigo CC Compact All versions, SIMATIC WinCC OA V3.16 All versions in default configuration, SIMATIC WinCC OA V3.17 All versions in non-default configuration, SIMATIC WinCC OA V3.18 All versions in...

CVE-2022-33139

A vulnerability has been identified in Cerberus DMS All versions, Desigo CC All versions, Desigo CC Compact All versions, SIMATIC WinCC OA V3.16 All versions in default configuration, SIMATIC WinCC OA V3.17 All versions in non-default configuration, SIMATIC WinCC OA V3.18 All versions in...

Default configuration

A vulnerability has been identified in Cerberus DMS All versions, Desigo CC All versions, Desigo CC Compact All versions, SIMATIC WinCC OA V3.16 All versions in default configuration, SIMATIC WinCC OA V3.17 All versions in non-default configuration, SIMATIC WinCC OA V3.18 All versions in...