SQL Injection Vulnerability in Cumulus Reports

Cumulus Reports is a free enterprise-grade WEB reporting tool. Cumulus Reports suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

Command Execution Vulnerability in EasyReport

EasyReport is an easy to use Web reporting tool , its main function is to query the SQL statement to convert the data into a report page , while supporting the table across the rows RowSpan and across the columns ColSpan configuration. A command execution vulnerability exists in EasyReport. An...

Arbitrary File Read Vulnerability in FineReport Version 8.0

FineReport reporting software is a pure Java written , data display reports and data entry forms functions in one enterprise-class web reporting tools . FineReport 8.0 version of the existence of arbitrary file read vulnerability, an attacker can be exploited to read any file on the site...