XML entity injection vulnerability exists in Panmicro e-cology (CNVD-2020-58448)

Panmicro e-cology is an OA office system made for large and medium-sized enterprises, supporting PC, mobile and WeChat simultaneous office and so on. An XML entity injection vulnerability exists in Panmicro e-cology. An attacker can exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in School Office OA System of Guangzhou Yingfeng Information Technology Co.

Guangzhou Yingfeng Information Technology Co., Ltd. school office OA system is a comprehensive management platform for schools, a comprehensive information management system for schools, and a digital campus management system. Guangzhou Yingfeng Information Technology Co., Ltd School Office OA...

File Upload Vulnerability in School Office OA System of Guangzhou Yingfeng Information Technology Co.

Guangzhou Yingfeng Information Technology Co., Ltd. school office OA system is a comprehensive management platform for schools, a comprehensive information management system for schools, and a digital campus management system. There is a file upload vulnerability in the Guangzhou Yingfeng...

SQL Injection Vulnerability in OA Office System of Chongqing Yanglang Technology Co.

It is a web application system that realizes the whole electronic process from learning to working and improves the operational efficiency of the enterprise through the deployment of multi-discipline collaboration modules such as process management, document management, news management, knowledge...

SQL Injection Vulnerability in OA Office System of Chengdu Huigao Software Co.

Chengdu Huigao Software Co., Ltd. is an OA software developer and service provider. A SQL injection vulnerability exists in the OA office system of Chengdu Huigao Software Co. The vulnerability can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in IBOS Office System

IBOS is a collaborative office management system based on PHP development. The IBOS office system suffers from an SQL injection vulnerability, which can be exploited by attackers to gain access to sensitive database information...

Arbitrary File Upload Vulnerability in Heartland OA Network Intelligent Office System

Heartland OA Network Intelligent Office System is a multi-functional intelligent office application software. An arbitrary file upload vulnerability exists in the HeartStone OA Network Intelligent Office System. An attacker can exploit the vulnerability to upload a webshell and gain server...

SQL Injection Vulnerability in Cu***.aspx Page of Huigao OA Office System

Chengdu Huigao Software Co., Ltd. is an OA software developer and service provider. There is a SQL injection vulnerability in the Cu.aspx page of the Huigao OA office system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in the Backend of Tongda OA Collaboration Office System 2017 Version

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

MS15-022: Description of the security update for the 2007 Microsoft Office system: March 10, 2015

Describes a security update that resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an...

File Upload Vulnerability in Liangjing OA Office System

Good Precision OA Office System is an application system that assists in the daily operation and management of an organization. A file upload vulnerability exists in Lite-On OA Office System, which can be exploited by attackers to upload malicious files and gain administrative privileges on the w...

SQL Injection Vulnerability in Xinhuo OA Office System

Xinhu OA office system is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhao OA Office System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Xinhou Collaboration Office System (CNVD-2020-23543)

Xinhuo Co-operation Office System is an open source and cross-platform office system. There is a SQL injection vulnerability in Xinhao Collaboration Office System, which can be exploited by attackers to obtain sensitive information from the database...

File Upload Vulnerability in Born Creative OA System

Born Creative OA office system for the first domestic open source OA software producers, using the leading B / S architecture, cross-platform language php + mysql and other flexible applications, is one of China's most extensive user base of OA software. Born Creative OA system file upload...

PHPOA has multiple vulnerabilities

PHPOA Office System is developed independently by Guilin Tiansheng Zhichuang Information Technology Co., Ltd OA R & D group based on PHP MySQL open source OA system. PHPOA has multiple vulnerabilities that can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in SeaChange Collaboration Office System

Wuhan Haichang Information Technology Co., Ltd. is a high-tech enterprise engaged in the research, development and sales of office automation software, collaboration management software and e-government software. An SQL injection vulnerability exists in the SeaChange Collaboration Office system,...

File Deletion Vulnerability in Panavision OA Collaboration Office System

Panmicro oa office system is a business office software. A file deletion vulnerability exists in Panmicro OA Collaboration Office System, which can be exploited by an attacker to delete arbitrary files...

Code Execution Vulnerability in Easoft Tianchuang Ranzhi Collaboration Office System

Ranz is a collaborative office system for small and medium-sized businesses. A code execution vulnerability exists in Easoft Tiantron's Ranzhi Collaboration Office System, which can be exploited by an attacker to store a maliciously-constructed payload into the database, and the system will execu...

File Upload Vulnerability in Panavision OA Collaboration Office System

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...

Arbitrary File Download Vulnerability in Zhiyuan OA

Zhiyuan OA is an office system developed by Beijing Zhiyuan Internet Software Co. There is an arbitrary file download vulnerability in Zhiyuan OA, which can be exploited by attackers to download arbitrary files and obtain sensitive information...