EUVD-2024-16789

Malicious code in bioql PyPI...

CVE-2024-1012

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

CVE-2024-1012

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

CVE-2024-1012

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

Sql injection

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

CVE-2024-1012

Wanhu ezOFFICE 11.1.0 is affected by a SQL injection in wf_printnum.jsp via the recordId parameter. The issue, described as critical and remotely exploitable, affects processing of defaultroot/platform/bpm/work_flow/operate/wf_printnum.jsp and has been publicly disclosed (VDB-252281). Multiple so...

CVE-2024-1012 Wanhu ezOFFICE wf_printnum.jsp sql injection

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

CVE-2024-1012 Wanhu ezOFFICE wf_printnum.jsp sql injection

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...

Wanhu ezOFFICE SQL Injection Vulnerability

Wanhu ezOFFICE is a comprehensive office suite software from Wanhu, a Chinese company. A SQL injection vulnerability exists in Wanhu ezOFFICE version 11.1.0, which originates in defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp, which contains unknown processing that can lead to SQL...

PT-2024-16042 · Wanhu · Wanhu Ezoffice

Name of the Vulnerable Software and Affected Versions: Wanhu ezOFFICE version 11.1.0 Description: A critical issue has been found in the processing of the file defaultroot/platform/bpm/work flow/operate/wf printnum.jsp. The manipulation of the recordId argument leads to sql injection. The attack...