5 matches found
Thousand OA collaborative office management platform defaultroot/mobile/setting/setPersonInfo. jsp injection vulnerability
No description provided by source...
Thousand OA /defaultroot/public/editor/tpsc. jsp file upload vulnerability
No description provided by source...
Thousand OA collaborative office management platform govdocumentmanager_judge. jsp numId parameter sql injection vulnerability
No description provided by source...
Thousand OA collaborative office management platform GovReceiveFileAction. do RecordID parameter id injection vulnerability
No description provided by source...
WanHu ezoffice upload arbitrary file vulnerability-vulnerability warning-the black bar safety net
Brief description: Thousand oa system to publish announcements of the image upload control is not strict, cause you can upload any files! Detailed description: Open the announcement in the upload pictures page view the url as follows:...