22 matches found
CVE-2025-3402 Seeyon Zhiyuan Interconnect FE Collaborative Office Platform check.js%70 sql injection
A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform 5.5.2 and classified as critical. This issue affects some unknown processing of the file /sysform/042/check.js%70. The manipulation of the argument Name leads to sql injection. The attack may be initiated...
CVE-2025-3402
Vulnerability CVE-2025-3402 affects Seeyon Zhiyuan Interconnect FE Collaborative Office Platform 5.5.2. The issue arises from improper handling of the Name argument in the file /sysform/042/check.js70, enabling SQL injection. A remote attacker could exploit this, with exploitation publicly disclo...
Jinher OA C6 安全漏洞
Jinher OA C6 is a digital office platform from Jinher China. A security vulnerability exists in Jinher OA C6, which stems from an incorrect manipulation of a parameter ID that can lead to SQL injection...
CVE-2025-2030 Seeyon Zhiyuan Interconnect FE Collaborative Office Platform addUser.jsp sql injection
A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform up to 20250224. It has been rated as critical. Affected by this issue is some unknown functionality of the file /security/addUser.jsp. The manipulation of the argument groupId leads to sql injection. The...
Logic flaws exist in the integrated collaborative office platform of Hunan Chuangxing Technology Co.
Hunan Chuangxing Technology Co., Ltd. is a national key high-tech enterprise focusing on providing overall solutions of informatization, digitization and intelligence in the field of medical and healthcare. A logic flaw exists in the integrated collaborative office platform of Hunan Chuangxing...
e-Excellence U-Office Force 输入验证错误漏洞
e-Excellence U-Office Force is an e-Office platform from China-based First Class Technology e-Excellence. U-Office Force suffers from an input validation error vulnerability that stems from its login feature that allows a remote attacker to implement an open redirect that would redirect users to ...
SQL Injection Vulnerability in Panmicroeoffice8 (CNVD-2022-43843)
Panavision eoffice8 is a mobile office platform. A SQL injection vulnerability exists in Panmicroeoffice8, which can be exploited by attackers to obtain sensitive information from the database...
Hundred Plus 101EIP system 跨站脚本漏洞
Hundred Plus 101EIP system is a cloud-based office platform of Taiwan Hundred Plus Corporation Hundred Plus, which is the result of the experience of many enterprises. A cross-site scripting vulnerability exists in the Hundred Plus 101EIP system, which originates from the system adding a bulletin...
JC6 Collaborative OA Platform has SQL Injection Vulnerability
JC6 collaborative OA platform is a J2EE framework-based collaborative office platform developed by Beijing Jinhe Software Co. There is a SQL injection vulnerability in JC6 Collaborative OA Platform. Attackers can use the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in Kingdee Collaboration Office Platform
Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...
SQL Injection Vulnerability in Kingdee Collaboration Office Platform (CNVD-2020-75008)
Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...
SQL Injection Vulnerability in Smart Government OA Collaboration Platform
Intelligent government OA collaborative office platform is a set of independent research and development of collaborative office software, is specifically tailored for the government office of the new office software system. There is a SQL injection vulnerability in Smart Government OA...
Information leakage vulnerability in te***.aspx page of the collaborative office management platform of Quanta Technology Co.
Quanta Technology Co., Ltd. is a digital construction platform service provider that provides more than one hundred products/services based on "end+cloud+big data" and value-added services such as industrial big data and industrial new finance, with the core support of professional applications i...
Information Leakage Vulnerability in Collaborative Office Management Platform of Quanta Technology Co.
Quanta Technology Co., Ltd. is a digital construction platform service provider that provides more than one hundred products/services based on "end+cloud+big data" and value-added services such as industrial big data and industrial new finance, with the core support of professional applications i...
Arbitrary File Read Vulnerability in Sancai Journal Acquisition and Editing System
Sancai Journal Acquisition and Editing System is a networked office platform. Sancai Journal Acquisition and Editing System suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to read arbitrary files...
SQL Injection Vulnerability in Sancai Journal Acquisition and Editing System
Sancai Journal Acquisition and Editing System is a networked office platform. SQL injection vulnerability exists in Sancai Journal Editorial System. An attacker can exploit the vulnerability to obtain sensitive information from the database...
SQL Injection Vulnerability in Collaborative Office Management Platform of Beijing Lianda Power Information Technology Development Co.
Beijing Lianda Power Information Technology Development Co., Ltd. collaborative office management platform is an automated system for office information processing. A SQL injection vulnerability exists in the Collaborative Office Management Platform of Beijing Lianda Power Information Technology...
Cross-site Scripting Vulnerability in Tonglian Da3 Collaboration Office Platform
Tonglian Da3 cooperative office platform is a series of Da3 management software products provided by Tonglian for governmental units at all levels, focusing on "mobile government office". There is a cross-site scripting vulnerability in the Da3 collaborative office platform, which can be exploite...
SQL Injection Vulnerability in VOA (Pengwei) System RelationID Parameter
Shenzhen Pengwei Information Technology Co., Ltd VOA collaborative office platform is a kind of asp development OA system. VOA Pengwei system relationID parameter exists SQL injection vulnerability, the vulnerability URL is...
UF FE office platform /security/role_add_user. jsp parameters searchValue SQL injection vulnerability
No description provided by source...