8 matches found
Yonyou KSOA SQL injection vulnerability
Yonyou KSOA is an enterprise-level management software developed by Yonyou Corporation in China. Version 9.0 of Yonyou KSOA contains a SQL injection vulnerability, which stems from incorrect handling of parameters named “ID” in the file/worksheet/worksaddplan.jsp. This vulnerability may lead to S...
CVE-2025-52546 Stored XSS by uploading a specially crafted floor plan file
E3 Site Supervisor Control firmware version 2.31F01 has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially crafted floor plan file, an attacker can inject a stored XSS to the floorplan web page...
Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System 代码问题漏洞
Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System is a flash flood prevention monitoring and early warning system from Suncreate. A code issue vulnerability exists in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System 20230706 and earli...
SDFingerD 1.1 Failure To Drop Privileges Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7977/info sdfingerd has been reported prone to a local privilege escalation vulnerability. The issue presents itself because the sdfingerd daemon fails to sufficiently drop group privileges before executing commands that...
CVE-2002-2274
akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user nobody via a symlink attack on the .plan file...
CVE-2002-2274
Affected software: akfingerd 0.5 (and earlier per linked records). Vulnerable component: the .plan file handling in akfingerd, exploited via a symlink attack that lets local users read arbitrary files as the akfingerd user (nobody). Impact: local read access to arbitrary files; CVSS notes show lo...
[CERT-intexxia] pfinger Format String Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY ADVISORY INTEXXIAc 18 12 2001 ID 1050-181201 TITLE : pfinger Format String Vulnerability CREDITS : Guillaume Pelat / INTEXXIA SYSTEM AFFECTED =============== pfinger = 0.7.7 DESCRIPTION =========== pfinger is a finger daemon written in C. It ...
