CVE-2019-9759: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approvecenter/list/inputform/workhandle.php runid parameter...

泛微E-office /E-mobile/flowsorce_page.php等20处 SQL注入漏洞

0x01漏洞简介 泛微E-office在以下20处存在SQL注入漏洞 1/E-mobile/flowdopage.php?diff=delete&RUNID=1 //参数RUNID 2/E-mobile/flowdopage.php?diff=delete&flowid=1 //参数flowid 3/E-mobile/flowsorcepage.php?flowid=2 4/E-mobile/flownextpage.php?diff=candeal&detailid=2 5/E-mobile/flowimagepage.php?FLOWID=2...