Arbitrary File Read Vulnerability in Panavision OA

Panavision OA Office System is a coordination office software. An arbitrary file read vulnerability exists in Panmicro OA, which can be exploited by an attacker to obtain sensitive information...

Arbitrary File Download Vulnerability in Panavision OA

Panavision OA Office System is a coordination office software. An arbitrary file download vulnerability exists in Panmicro OA, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Letter Call OA System (CNVD-2019-23864)

Xinhuo Co-operation Office System is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhao OA system, which can be exploited by attackers to obtain sensitive information from the database...

Arbitrary File Read Vulnerability in Zhiyuan OA-A8 System

Zhiyuan OA-A8 system is an office system developed by Beijing Zhiyuan Xiechuang Software Co. Zhiyuan OA-A8 system has an arbitrary file read vulnerability, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Zhiyuan Internet Collaboration Office OA System

The Zhiyuan Internet collaborative office OA system is a set of collaborative office management software. A weak password vulnerability exists in the Zhiyuan Internetwork OA system, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Collaborative Office System of Yunnan Ruoshui Network Technology Co.

Yunnan Ruoshui Network Technology Co., Ltd. is an Internet service company. An unauthorized access vulnerability exists in the collaborative office system of Yunnan Ruoshui Network Technology Co. An attacker can obtain sensitive information of website users by brute force cracking...

SQL Injection Vulnerability in Xinhuooa System

Xinhuo Co-operation Office System is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhuo OA system, attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in we***/we***.php, a generic framework for Xinhao Collaboration Office System

Xinhuo Co-operation Office System is an office system based on php and mysql development. SQL injection vulnerability exists in we/we.php, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Network Office System of Beijing Hanqing Weiye Technology Co.

Ltd. is a company dedicated to the research and development of enterprise management software for the publishing industry, medical industry, agriculture, immigration industry and other research and development of enterprise management software, providing quality software services. A SQL injection...

Xinhuo open source OA office system v1.7.8 version of the existence of ultra vires access vulnerability

Xinhuo Co-operation Office System is an open source and cross-platform office system. Xinhuo open source OA office system v1.7.8 version of the existence of ultra-rights access vulnerability , attackers can exploit the vulnerability to view sensitive information...

Letter call - open source OA office system SQL injection vulnerability

Xinhuo Co-operation Office System is an open source and cross-platform office system. A SQL injection vulnerability exists in Xinhao Collaboration Office v1.7.6, which can be exploited by attackers to obtain sensitive database information...

MS09-043: Description of the security update for Office 2003 Web Components for the 2007 Office system: August 11, 2009

MS09-043: Description of the security update for Office 2003 Web Components for the 2007 Office system: August 11, 2009 INTRODUCTION Microsoft has released security bulletin MS09-043. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

SQL Injection Vulnerability in Xiaowei OA System of Beijing Xiaowei Help Technology Co.

Xiaowei OA system is Beijing Xiaowei Help Technology Co., Ltd. to provide mobile office platform for small and medium-sized enterprises. Ltd. SQL injection vulnerability exists in the small micro OA system, an attacker can use the vulnerability to obtain sensitive information in the database...

Micro OA365 WeChat Office System suffers from an override access vulnerability

Micro OA365 is an excellent free microsoft office platform software. Micro OA365 WeChat Office System suffers from an override access vulnerability. An attacker can exploit the vulnerability to jump to other arbitrary pages...

File Upload Vulnerability in Micro OA365 WeChat Office System

Micro OA365 is a simple, easy to use, free, microsoft mobile office software. A file upload vulnerability exists in Micro OA365 WeChat Office System. An attacker can exploit the vulnerability to upload arbitrary files and gain control of the web server...

XSS Vulnerability in Baoding OA Email Function

Baoding OA system is an office system for enterprises. An XSS vulnerability exists in the email function of Baoding OA. An attacker can exploit this vulnerability to gain administrator privileges, steal data, etc...

Cross-Site Scripting Vulnerability in C8OA System ID Parameter

C8OA system is a cooperative office system of Anhui XED Software Technology Co. There is a cross-site scripting vulnerability in the ID parameter of the C8OA system that allows an attacker to insert malicious js code into the page to obtain information such as user cookies, leading to user...

Multiple Reflective Cross-Site Scripting Vulnerabilities in Xinhao Collaboration Office System

Xinhuo coworking system is an open source office system, cross-platform system, support APP, pc web version, pc client and so on. There are multiple reflective cross-site scripting vulnerabilities in Xinhao Collaboration Office System. Because the gettotal parameter is not filtered, resulting in...

MS10-056: Description of the security update for the 2007 Office system and for the Compatibility Pack for the 2007 Office system: August 10, 2010

MS10-056: Description of the security update for the 2007 Office system and for the Compatibility Pack for the 2007 Office system: August 10, 2010 INTRODUCTION Microsoft has released security bulletin MS10-056. To view the complete security bulletin, visit one of the following Microsoft websites:...

MS12-057: Description of the security update for 2007 Office system (MSCONV97): August 14, 2012

MS12-057: Description of the security update for 2007 Office system MSCONV97: August 14, 2012 Microsoft has released security bulletin MS12-057. To view the complete security bulletin, go to one of the following Microsoft websites: Home...