Linwz

An Arbitrary File Read issue exists in OAKlouds developed by HGiga. Unauthenticated remote attackers can use Relative Path Traversal—a technique used to access files and directories stored outside the web root folder—to read arbitrary system files.

OAKlouds developed by HGiga contains an insecure deserialization flaw. This issue allows unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content. Insecure deserialization occurs when untrusted data is used to abuse the logic of an application to execute unexpected commands or code.

An arbitrary file upload flaw allows unauthenticated remote attackers to upload and execute web shell backdoors, which can lead to arbitrary code execution on the server.

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents.

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution issue. Unauthenticated remote attackers can force the system to download arbitrary executable files from a remote source and execute them.

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution issue. Unauthenticated remote attackers can force the system to download arbitrary DLL files from a remote source and execute them. The issue allows attackers to execute code on the targeted system without requiring authentication.

C&Cm@il, developed by HGiga, contains a SQL Injection flaw. Authenticated remote attackers can exploit this to inject arbitrary SQL commands, potentially leading to unauthorized database content access. The vulnerability allows for the execution of SQL commands, enabling attackers to read data from the database.

C&Cm@il developed by HGiga has a Missing Authentication issue. This allows unauthenticated remote attackers to read and modify any user's mail content.

C&Cm@il, developed by HGiga, contains a SQL Injection flaw. This allows attackers who do not need to be logged in to inject arbitrary SQL commands, potentially allowing them to read the contents of the database. The vulnerability affects the application's handling of SQL queries, enabling malicious input to manipulate database operations.

The Statistics Database System developed by Gotac has an Arbitrary File Read issue. Unauthenticated remote attackers can exploit Relative Path Traversal to download arbitrary system files. The issue allows attackers to access files on the system.

The Police Statistics Database System developed by Gotac is subject to an arbitrary file upload issue. A remote, unauthenticated attacker can exploit this to upload and execute web shell backdoors, leading to arbitrary code execution on the server.

The Police Statistics Database System developed by Gotac contains an Absolute Path Traversal issue. This allows unauthenticated remote attackers to enumerate the system file directory.

The Police Statistics Database System developed by Gotac suffers from a missing authentication issue. This allows remote attackers to read, modify, and delete database contents without authentication by utilizing a specific functionality.

The Police Statistics Database System developed by Gotac contains a flaw that allows a remote, unauthenticated attacker to read arbitrary system files through an Absolute Path Traversal technique. This vulnerability enables the attacker to download files from the system.

The Statistics Database System developed by Gotac has a missing authentication issue. This allows unauthenticated remote attackers to directly exploit a specific functionality to query database contents.

The N-Reporter, N-Cloud, and N-Probe developed by N-Partner are susceptible to an OS Command Injection issue. Authenticated remote attackers can inject arbitrary OS commands and execute them on the server.

O'View MapServer developed by PilotGaea Technologies contains a Server-Side Request Forgery vulnerability. This allows unauthenticated remote attackers to probe internal networks.

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

The eHRD platform contains a reflected cross-site scripting issue. This allows unauthenticated remote attackers to execute arbitrary JavaScript code in a user's browser through phishing attacks.