Command Execution Vulnerability in Zendo Backend of Qingdao Easoft Tianchuang Network Technology Co.

Zendo is a home-grown project management software. There is a command execution vulnerability in the backend of Zendo, which can be exploited by attackers to obtain server control privileges...

There are SQL injection vulnerabilities in the backend of Zendo open source version of Qingdao Yiqi Tianchuang Management Consulting Co.

Zendo Open Source Edition is a research and development project management software. There is a SQL injection vulnerability in the backend of Zendo Open Source Edition of Qingdao Yiqi Tianchuang Management Consulting Co. An attacker can exploit this vulnerability to obtain sensitive information...