Lucene search
+L

6 matches found

CNNVD
CNNVD
•added 2025/05/08 12:00 a.m.•25 views

Znuny 安全漏洞

Znuny is a work order system from Znuny, Inc. A security vulnerability exists in Znuny 7.1.3 and prior versions that stems from improper access control and could lead to information disclosure...

7.5CVSS6.1AI score0.00362EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/11 12:00 a.m.•21 views

Znuny 安全漏洞

Znuny is a work order system from Znuny, Inc. A security vulnerability exists in Znuny versions 6.5.1 through 6.5.10, 7.0.1 through 7.0.16, and 6.0 that originates from a denial-of-service/redo attack that allows parsing of email content via email can result in high CPU usage and block the parsin...

7.5CVSS6.4AI score0.00593EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/11/11 12:00 a.m.•19 views

ferry 路径遍历漏洞

ferry is lanyulei personal developer based on Gin + Vue + Element UI front-end and back-end separation of the work order system. There is a path traversal vulnerability in ferry, which originates from some unknown functionality in the apis/process/task.go file and can be exploited by an attacker ...

9.8CVSS8.2AI score0.00689EPSS
SaveExploits0References2
NVD
NVD
•added 2010/11/05 7:00 p.m.•29 views

CVE-2010-4186

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System OWOS Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information...

7.5CVSS8.5AI score0.0101EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
•added 2010/11/05 12:00 a.m.•9 views

PT-2010-5344

Name of the Vulnerable Software and Affected Versions OnlineTechTools Online Work Order System OWOS Professional Edition version 2.10 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the password parameter in the "process.asp" file...

7.5CVSS0.0101EPSS
SaveExploits3References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/11/05 12:00 a.m.•10 views

CVE-2010-4186: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System OWOS Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information...

7.5CVSS6.5AI score0.0101EPSS
SaveExploits3References2
Rows per page
Query Builder