158 matches found
Fckeditor Arbitrary File Upload Vulnerability and Directory Traversal Vulnerability in Office System of Ningbo Jieda Software Co.
Jeedaa ERP software is designed for domestic small and medium-sized manufacturing enterprises that produce or process on their own, and at the same time incidentally carry out sales. Jeedaa Office Management System Jeedaa OA is a collaborative office management platform. Jeeda eHR is used to...
Stored Cross-site Scripting Vulnerability in the Latest Version of Tongda OA Office System
Tongda OA office system 2015 office anywhere 2015 is a domestic office software. A stored cross-site scripting vulnerability exists in the editor of Offer Anywhere 2015, a Tongda OA network intelligent office system. A remote attacker can exploit this vulnerability to inject arbitrary Web script ...
SQL Injection Vulnerability in Tongda OA System
Ltd. OA-Office Anywhere system is a network intelligent office system developed using PHP. There is a SQL injection vulnerability in this product, the vulnerability URL is: http://host/interface/auth.php?&PASSWORD=1&USERID= The vulnerability URL is: The injected parameter is: USERID The attacker...
imo cloud Office system get_file.php parameter nid arbitrary command execution vulnerability
No description provided by source...
imo cloud Office system /Customize/Audit/auditreport/Qgroupmsg.php files like uid parameter SQL injection vulnerability
No description provided by source...
imo cloud Office system /Customize/Audit/auditreport/downnmsg.php file the uid parameter SQL injection vulnerability
No description provided by source...
Source day software OA Office system com. velcro. base. GetDataAction parameters formid SQL injection vulnerability
No description provided by source...
SQL Injection Vulnerability in the LoginName Parameter of the Collaboration Office System of Shanghai CITIC Information Development Co.
CITIC Shanghai Information Development Co., Ltd. collaborative office system is a set of online office automation software A SQL injection vulnerability exists in the loginName parameter of the CITIC Information Development Co., Ltd. collaborative office system, which can be exploited by an...
Remote Command Execution Vulnerability in Office System of Nonferrous Metals Technology and Economic Research Institute (NMTRI)
Nonferrous metal technology and economic research institute office office system is a set of enterprise daily office system. The product has a remote command execution vulnerability that can be exploited by an attacker to remotely execute commands and gain server privileges...
用友FE协作办公系统 /cooperate/traceNodes.jsp 文件 model_GUID 参数SQL注入漏洞
No description provided by source...
Generalized SQL Injection Vulnerability in Haitian OA Office System of Beijing Lianjie Haitian Technology Co.
Haitian OA office system is an office system software developed by Beijing Lianjie Haitian Technology Co. Ltd. Haitian OA Office System suffers from a generic SQL injection vulnerability, which allows attackers to exploit the vulnerability to obtain sensitive information...
用友FE协作办公系统 /security/addRole.jsp 文件 dept 参数SQL注入漏洞
http://www.wooyun.org/bugs/wooyun-2014-060793...
imo云办公室系统/server/loginBindkd.php cAccount参数命令执行漏洞
No description provided by source...
Stored Cross-Site Scripting Vulnerability in 78OA Office System
78OA office system is a full-featured OA office system launched by Shenzhen Xinxingkong Software for large and medium-sized enterprises and group enterprises. 78OA office system has a stored cross-site script vulnerability, an attacker can directly insert the cross-site script, and triggered by a...
Office Anywhere 网络智能办公系统某版本前台获取数据库（无需登录）
简要描述： Office Anywhere 网络智能办公系统某版本前台获取数据库（无需登录） 详细说明： Office Anywhere 2011 网络智能办公系统 存在一个通用路径泄漏问题，而泄漏的登录地址可以不需要权限登录到phpmyadmin 且权限为root /mysql/main.php 解密出来可直接登录,这里就不登录进去了 漏洞证明： 附部分案例： http://218.24.163.216:8080/ http://220.171.81.126:1234/ http://221.2.43.9:8000/ http://221.204.213.24/...
金蝶办公系统get_file.jsp 和getFileUseSpace两处 SQL注入
No description provided by source...
Struts2 Remote Command Execution Vulnerability in Guangzhou Newsoft Computer Technology Co.
Guangzhou Newsoft Computer Technology Co., Ltd. is a core high-tech enterprise specializing in the research, development and application of intelligent transportation, logistics and information technology under Guangdong Provincial Transportation Group. The new soft collaborative office system is...
金蝶协作办公系统 /kingdee/tree/tree/ 五处SQL注入漏洞
No description provided by source...
大汉网络政府办公系统 /lm/front/reg_2.jsp 文件 sysid 参数本地文件包含漏洞
No description provided by source...
SQL Injection Vulnerability in Collaboration Office System of Zhengfang Software Co.
Zhengfang Collaborative Office System is a solution for teaching integration, student integration, office integration and resource integration developed by Zhengfang Software Co. A SQL injection vulnerability exists in the Zhengfang Collaboration Office System, which allows attackers to exploit...