泛微 Vulnerabilities
426 vulnerabilities related to 泛微
- PoC2026-08-14泛微E-cology10 /papi/passport/appnew/login/appLogin 未授权访问漏洞
- 2026-07-29泛微-Ecology10 getFieldValueFun SQL注入漏洞
- 2026-07-20泛微 e-cology10 /papi/em/transform/downLoadSyslog 文件读取漏洞
- 2026-06-12泛微E-ecology 10 /papi/file/module/upload SQL 注入漏洞
- 2026-06-05泛微 E-Cology /hrm/hrm_e9/orgChart/js/jquery/plugins/jqueryFileTree/connectors/jqueryFileTree.jsp 目录遍历漏洞
- 2026-05-15泛微ecology10 存在sql注入漏洞
- 2026-04-10泛微e-office /iWebOffice/Signature/SignatureDel.php SQL 注入漏洞
- 2026-04-10泛微E-Cology9 /services/WorkPlanService SQL 注入漏洞
- PoC2026-03-27泛微E-cology 10 /papi/em/transform/getEmDsList 信息泄露漏洞
- 2026-03-20泛微E-cology10 dubboApi 存在远程代码执行漏洞
- 2026-03-20泛微E-cology10 getEmDsList 敏感信息泄露
- 2026-03-17泛微 E-cology10 xmReport 代码执行漏洞
- 2026-03-17泛微 E-cology10 dubboApi 代码执行漏洞
- 2026-03-13泛微云桥e-Bridge /wxthirdapi/sendWxMsg SQL 注入漏洞
- PoC2026-03-06泛微云桥 e-Bridge sendWxMsg 接口存在SQL注入漏洞
- PoC2026-02-06泛微OA E-Cology /rest/ofs/ProcessDoneRequestByXml XML 外部实体注入漏洞
- PoC2026-01-30泛微OA E-Cology /rest/ofs/ReceiveTodoRequestByXml XML 外部实体注入漏洞
- 2026-01-30泛微OA E-Cology /rest/ofs/ReceiveTodoRequestByXml XML 外部实体注入漏洞
- PoC2026-01-23泛微OA E-Cology /rest/ofs/deleteRequestInfoByXml XML 外部实体注入漏洞
- 2026-01-23泛微OA E-Cology /rest/ofs/deleteRequestInfoByXml XML 外部实体注入漏洞
- 2025-11-21泛微e-office /E-mobile/App/System/UserSelect/dept.php 未授权访问漏洞
- 2025-11-21泛微e-office /E-mobile/App/System/UserSelect/dept.php 未授权访问漏洞
- PoC2025-11-14泛微 eoffice /E-mobile/App/Weixin/WeiServiceApi.php 权限绕过漏洞
- 2025-11-14泛微 eoffice /E-mobile/App/Weixin/WeiServiceApi.php 权限绕过漏洞
- 2025-10-30泛微e-cology 前台SQL注入漏洞
- 2025-10-17泛微 E-Cology ognl 代码注入漏洞
- 2025-10-17泛微 E-Cology ognl 代码注入漏洞
- 2025-10-11泛微 E-Cology /dwr/call/plaincall/ 身份验证缺陷漏洞
- 2025-10-11泛微 E-Cology /dwr/call/plaincall/ 身份验证缺陷漏洞
- 2025-09-19泛微OA /dwr/call/plaincall/ 权限绕过漏洞
- 2025-09-19泛微OA /dwr/call/plaincall/ 权限绕过漏洞
- 2025-09-09泛微OA weaver.common.Ctrl 任意文件上传漏洞
- PoC2025-09-09泛微OA ShowDocsImage SQL注入漏洞
- PoC2025-09-04泛微OA E-Cology Action.jsp mobile.skin.SkinAction 任意文件上传漏洞
- 2025-09-03泛微 E-Office /E-mobile/create/ajax_do.php 存在SQL注入漏洞
- 2025-09-03泛微 E-weaver /api/ec/dev/locale/getLabelByModule 存在SQL注入漏洞
- 2025-09-03泛微 E-Office /E-mobile/diarydo.php存在SQL注入漏洞
- 2025-09-01e-office-v10-officeserver-upload: 泛微OA E-Office OfficeServer.php 任意文件上传漏洞
- 2025-09-01ecology-ebridge-addtaste-sqli: 泛微云桥 taste/addTaste SQL注入
- 2025-09-01ecology-ifnewscheckoutbycurrentuser-dwr-sqli: 泛微 E-Cology ifnewscheckoutbycurrentuser.dwr SQL 注入
- 2025-09-01ecology-ktreeuploadaction-upload: 泛微 e-cology 任意文件上传
- 2025-08-29泛微 Emessage / decorator 参数 文件读取漏洞
- 2025-08-29泛微 Emessage / decorator 参数 文件读取漏洞
- 2025-08-22泛微 E-Mobile /installOperate.do 服务器端请求伪造漏洞
- 2025-08-22泛微E-Office /general/crm/record/detail.php SQL 注入漏洞
- 2025-08-22泛微e-office /webservice/calendar/cale.wsdl.php SQL 注入漏洞
- 2025-08-22泛微 E-Mobile /installOperate.do 服务器端请求伪造漏洞
- 2025-08-22泛微E-Office /general/crm/record/detail.php SQL 注入漏洞
- 2025-08-22泛微e-office /webservice/calendar/cale.wsdl.php SQL 注入漏洞
- 2025-08-21泛微 OA E-Cology deleteUserRequestInfoByXml 文件读取漏洞（CVE-2023-2806）
- 2025-08-21泛微OA /weaver/weaver.file.FileDownloadForOutDoc SQL 注入漏洞
- 2025-08-21泛微 OA E-Cology deleteUserRequestInfoByXml 文件读取漏洞（CVE-2023-2806）
- 2025-08-21泛微OA /weaver/weaver.file.FileDownloadForOutDoc SQL 注入漏洞
- PoC2025-08-01CNVD-2017-03561: 泛微 E-Mobile 表达式注入
- PoC2025-08-01CNVD-2019-32204: 泛微OA E-Cology BshServlet 远程代码执行漏洞
- PoC2025-08-01CNVD-2021-33202: 泛微OA E-Cology LoginSSO.jsp SQL注入漏洞
- PoC2025-08-01CNVD-2021-49104: 泛微OA E-Office UploadFile.php 任意文件上传漏洞
- PoC2025-08-01CNVD-2023-12632: 泛微 OA e-cology v9 sql 注入
- PoC2025-08-01ecology-e-office-mysql-config-leak: 泛微OA E-Office mysql_config.ini 数据库信息泄漏
- PoC2025-08-01e-bridge-saveyzjfile-file-read: 泛微OA E-Bridge saveYZJFile 任意文件读取
- PoC2025-08-01ecology-arbitrary-file-upload: 泛微OA e-cology V9前台任意上传漏洞
- PoC2025-08-01e-cology-e-office-officeserver-file-read: 泛微OA E-Office officeserver.php 任意文件读取漏洞
- PoC2025-08-01e-cology-filedownload-directory-traversal: 泛微OA e-cology 文件下载目录遍历
- PoC2025-08-01e-cology-getsqldata-sql-inject: 泛微OA E-Cology getSqlData SQL注入漏洞
- PoC2025-08-01e-cology-hrmcareerapplyperview-sqli: 泛微OA E-Cology HrmCareerApplyPerView.jsp SQL注入漏洞
- PoC2025-08-01e-cology-jqueryfiletree-ile-inclusion: 泛微OA E-Cology jqueryFileTree.jsp 目录遍历漏洞
- PoC2025-08-01e-cology-oa-e-weaver-signature-download: 泛微 OA E-Weaver SignatureDownLoad 任意文件读取
- PoC2025-08-01e-cology-verify-quick-login-user-login: 泛微OA E-Cology VerifyQuickLogin.jsp 任意管理员登录漏洞
- PoC2025-08-01e-cology-workflowcentertreedata-sqli: 泛微OA E-Cology WorkflowCenterTreeData SQL注入漏洞
- PoC2025-08-01e-mobile-6.0-client-rce: 泛微 e-Mobile 6.0 命令执行
- PoC2025-08-01e-mobile-client-filedownload: 泛微 E-mobile-client接口任意文件下载
- PoC2025-08-01e-office-v10-sql-inject: 泛微 eoffice v10 前台 SQL 注入
- PoC2025-08-01e-office10-atuh-file-phar-deserialization-rce: 泛微E-office 10 atuh-file存在phar反序列化漏洞
- PoC2025-08-01ecology-e-office-getselectlist-crm-sqli: 泛微e-office系统存在SQL注入漏洞
- PoC2025-08-01ecology-filedownloadforoutdoc-sqli: 泛微 OA filedownloadforoutdoc - SQL injection
- PoC2025-08-01ecology-ofslogin-aul: 泛微 e-cology 任意用户登录漏洞
- PoC2025-08-01emobile-lang2sql-fileupload: 泛微移动管理平台E-mobile lang2sql接口存在任意文件上传
- PoC2025-08-01eoffice-v9-mobile-upload-save-fileupload: 泛微 E-Office v9.5 mobile_upload_save 任意文件上传漏洞
- PoC2025-08-01eoffice-v9-uploadify-fileupload: 泛微 E-Office v9.5 uploadify 任意文件上传漏洞
- PoC2025-08-01e-cology-syncuserinfo-sqli: 泛微OA e-cology syncuserinfo SQL注入漏洞
- PoC2025-08-01ecology-changeuserinfo-info-leak: 泛微 e-cology changeuserinfo 信息泄露
- PoC2025-08-01ecology-oa-deleteuserrequestinfobyxml-xxe: 泛微 OA deleteUserRequestInfoByXml XXE
- 2025-07-10泛微e-cology list 前台SQL注入漏洞
- 2025-07-10泛微OA block_content.php SQL注入漏洞
- 2025-07-09泛微e-cology 前台SQL注入漏洞
- 2025-07-08泛微E-Cology登录绕过漏洞
- 2025-07-07泛微OA /api/workflow/regform/remarkOperate 远程代码执行漏洞
- 2025-07-04泛微OA mobilemode/public.jsp 任意用户登录漏洞
- 2025-07-02泛微OA前台登录绕过&后台代码执行漏洞
- 2025-06-19泛微E-cology9 存在SQL注入漏洞
- 2025-06-17泛微 E-cology SQL注入漏洞
- 2025-05-27泛微云桥 e-Bridge checkMobile接口存在SQL注入漏洞
- 2025-05-20泛微E-Office SignatureDel.php SQL注入漏洞
- 2025-05-20泛微e-office SignatureDel.php sql注入漏洞
- 2025-04-30泛微 E-Officee /building/config/config.ini 信息泄露漏洞
- 2025-04-30泛微 E-Officee /building/config/config.ini 信息泄露漏洞
- 2025-04-23泛微E-Cology ktreeuploadaction 文件上传漏洞
- 2025-04-23泛微OA E-cology /mobile/plugin/plugin.xml 存在未授权访问漏洞
- 2025-04-14泛微OA E-cology SQL注入漏洞
- 2025-04-03泛微e-office /webservice-json/email/email.wsdl.php SQL 注入漏洞
- 2025-04-03泛微e-office /general/weibo/javascript/uploadify/uploadify.php 文件上传漏洞
- 2025-04-03泛微e-office /webservice/upload.php 文件上传漏洞
- 2025-04-03泛微e-office /webservice-json/email/email.wsdl.php SQL 注入漏洞
- 2025-04-03泛微e-office /general/weibo/javascript/uploadify/uploadify.php 文件上传漏洞
- 2025-04-03泛微e-office /webservice/upload.php 文件上传漏洞
- 2025-03-28泛微E-Office online_person.wsdl.php SQL 注入漏洞
- 2025-03-21泛微E-Office /general/new_mytable/content_list/content_-4.php SQL 注入漏洞
- 2025-03-21泛微E-Office /webservice-json/online_person/online_person.wsdl.php GetPrivInfo SQL 注入漏洞
- 2025-03-21泛微E-Office /webservice-json/online_person/online_person.wsdl.php GetAllDeptInfo SQL 注入漏洞
- 2025-03-21泛微E-Office /webservice-json/online_person/online_person.wsdl.php Get_UserInfo SQL 注入漏洞
- 2025-03-21泛微E-Office /webservice-json/notify/notify.wsdl.php GetNotifyType SQL 注入漏洞
- 2025-03-21泛微E-Office /general/new_mytable/block_content.php SQL 注入漏洞
- 2025-03-21泛微E-Office /general/new_mytable/content_list/content_-4.php SQL 注入漏洞
- 2025-03-21泛微E-Office /webservice-json/online_person/online_person.wsdl.php GetPrivInfo SQL 注入漏洞
- 2025-03-21泛微E-Office /webservice-json/online_person/online_person.wsdl.php GetAllDeptInfo SQL 注入漏洞
- 2025-03-21泛微E-Office /webservice-json/online_person/online_person.wsdl.php Get_UserInfo SQL 注入漏洞
- 2025-03-21泛微E-Office /webservice-json/notify/notify.wsdl.php GetNotifyType SQL 注入漏洞
- 2025-03-21泛微E-Office /general/new_mytable/block_content.php SQL 注入漏洞
- 2025-03-11泛微e-office attendance.wsdl.php sql注入漏洞
- 2025-02-25泛微e-office sms_page.php sql注入
- 2025-02-25泛微e-office index.php sql注入
- 2025-02-19泛微E-Cology ReceiveCCRequestByXml 存在XXE漏洞
- 2025-02-14泛微 E-Office10 /eoffice10/server/ext/qysw/index.php 信息泄露漏洞
- 2025-02-14泛微 E-Office10 /eoffice10/server/ext/qysw/index.php 信息泄露漏洞
- 2025-02-11泛微OA CustomResourceServlet 后台文件上传漏洞
- 2025-01-15泛微OA ReceiveRequestInfoByXml XML实体注入漏洞
- PoC2025-01-10泛微OA ReceiveTodoRequestByXml XML实体注入漏洞
- 2024-12-27泛微e-cology /docs/networkdisk/checkFolderCanDelete.jsp SQL 注入漏洞
- 2024-12-27泛微e-cology /docs/networkdisk/checkFolderCanDelete.jsp SQL 注入漏洞
- 2024-12-26泛微OA E-Cology ReceiveTodoRequestByJson SQL注入漏洞
- 2024-12-26泛微OA E-Cology ReceiveRequestInfoByJson SQL注入漏洞
- 2024-12-26泛微OA E-Cology ProcessDoneRequestByJson SQL注入漏洞
- 2024-12-20泛微e-cology 9 /weaver/weaver.email.FileDownloadLocation/login/LoginSSOxjsp/x.FileDownloadLocation SQL 注入漏洞
- 2024-12-20泛微e-cology 9 /weaver/weaver.email.FileDownloadLocation/login/LoginSSOxjsp/x.FileDownloadLocation SQL 注入漏洞
- 2024-12-17泛微OA SQL注入漏洞
- 2024-12-17泛微OA weaver.email.FileDownloadLocation SQL注入漏洞
- 2024-12-16泛微E-Office /building/urlurl.php 权限绕过漏洞
- PoC2024-12-16泛微云桥 addTasteJsonp SQL注入漏洞
- PoC2024-12-16泛微云桥 checkmobile SQL注入漏洞
- 2024-12-16泛微云桥 e-Bridge addTasteJsonp 接口存在SQL注入漏洞
- 2024-12-05泛微-EMobile 移动管理平台 /admin/license/get 信息泄露漏洞
- 2024-11-29泛微e-mobile移动管理平台 默认口令漏洞
- 2024-11-29泛微e-mobile移动管理平台 默认口令漏洞
- 2024-11-21泛微OA /api/hrm/secondarypwd/checkPassword 远程代码执行漏洞
- 2024-11-21泛微OA /api/ec/dev/app/join 远程代码执行漏洞
- 2024-11-14泛微OA E-cology getResourceInfo SQL注入漏洞
- 2024-11-08泛微OA E-cology WorkflowServiceXml getUserId SQL注入漏洞
- 2024-11-06泛微E-Mobile移动管理平台 error 远程命令执行漏洞
- 2024-11-05泛微 e-cology /weaver/weaver.formmode.servelt.QRcodeBuildAction/login/LoginSSO.jsp 存在SQL注入漏洞
- 2024-11-05泛微OA E-Cology QRcodeBuildAction SQL注入漏洞
- 2024-10-25泛微e-Mobile /client/common/error 命令执行漏洞
- 2024-10-25泛微e-Mobile /client/common/error 命令执行漏洞
- 2024-10-18泛微e-cology /cpt/capital/CptInstock1Ajax.jsp SQL 注入漏洞
- 2024-10-18泛微e-cology /cpt/capital/CptInstock1Ajax.jsp SQL 注入漏洞
- 2024-10-16泛微E-Office flowimage_page.php SQL注入漏洞
- 2024-10-12泛微E-Mobile /cdnfile 文件读取漏洞
- 2024-10-12泛微E-Mobile /cdnfile 文件读取漏洞
- 2024-10-08泛微 e-cology CptInstock1Ajax 存在sql注入漏洞
- 2024-09-30泛微E-Office /E-mobile/App/System/File/downfile.php 文件读取漏洞
- 2024-09-30泛微E-Office /E-mobile/App/System/File/downfile.php 文件读取漏洞
- 2024-09-25泛微E-Cology CptInstock1Ajax接口 SQL注入漏洞
- 2024-09-25泛微e-cology9 FormmodeFieldBrowserServlet SQL注入漏洞
- PoC2024-09-25泛微ecology ImportValidationFieldServlet 前台SQL注入漏洞
- 2024-09-25泛微e-office前台远程代码执行漏洞
- 2024-09-25泛微e-cology confirmDoMergeNew 后台任意文件下载漏洞
- 2024-09-25泛微e-cology BrowserAction 前台SQL注入漏洞
- 2024-09-25泛微e-cology 自解压任意文件写入漏洞
- 2024-09-20泛微OA E-Cology /messager/users.data 信息泄漏漏洞
- 2024-09-20泛微OA E-Cology /messager/users.data 信息泄漏漏洞
- 2024-09-18泛微E-Mobile cdnfile 任意文件读取漏洞
- 2024-09-18泛微-EMobile cdnfile 任意文件读取致远程代码执行漏洞
- 2024-09-18泛微运维管理平台 权限绕过致远程代码执行漏洞
- 2024-09-14泛微e-office login_other.php SQL 注入漏洞
- 2024-09-14泛微e-office login_other.php SQL 注入漏洞
- 2024-09-06泛微-e-office uploadify.php 文件上传漏洞
- 2024-09-06泛微-e-office uploadify.php 文件上传漏洞
- 2024-09-04泛微移动管理平台信息泄露
- 2024-08-30泛微 E-Office /sample.php 权限绕过漏洞
- 2024-08-30泛微 E-Office /sample.php 权限绕过漏洞
- 2024-08-22泛微E-Cology9 ModeDateService 前台SQL注入漏洞
- 2024-08-21泛微 e-cology v10 appThirdLogin 权限绕过漏洞
- 2024-08-21泛微 E-Cology BlogService 存在SQL注入漏洞
- 2024-08-21泛微 e-cology v10 appThirdLogin 权限绕过漏洞
- 2024-08-20泛微 e-cology testConnByBasePassword 远程代码执行漏洞
- 2024-08-19泛微 e-office10 schema_mysql.sql 敏感信息泄露漏洞
- 2024-08-16泛微 OA filedownload.jsp 目录遍历漏洞
- 2024-08-14泛微 E-Cology 身份验证缺陷漏洞 可致越权登录
- 2024-08-14泛微 e-office10 schema_mysql.sql 信息泄露漏洞
- 2024-08-14泛微OA ecology 敏感信息泄露及越权登录漏洞
- 2024-08-14泛微 e-office10 schema_mysql.sql 信息泄露漏洞
- 2024-08-09泛微-emessage 文件读取漏洞
- 2024-08-09泛微-emessage 文件读取漏洞
- 2024-08-08泛微e-office10-mysql敏感信息泄露漏洞
- 2024-08-08泛微emobile /install/updatePlugin.do 鉴权绕过漏洞
- 2024-08-07泛微 e-cology 运维管理平台存在任意用户注册漏洞
- 2024-08-07泛微 E-office10 schema_mysql 敏感信息泄露漏洞
- 2024-08-06泛微云桥 addResume 任意文件上传漏洞
- 2024-08-05泛微OA E-Cology deleteRequestInfoByXml XXE漏洞
- 2024-08-05泛微 云桥e-Bridge /wxclient/app/recruit/resume/addResume 存在文件上传漏洞
- 2024-08-05泛微云桥 e-Bridge resume 任意文件上传漏洞
- 2024-08-04泛微E-Cology deleteRequestInfoByXml 存在XXE漏洞
- 2024-08-02泛微 ecology getFileViewUrl 服务端请求伪造漏洞
- 2024-08-01泛微E-office9 ajaxLists_CoopSQL注入
- 2024-08-01泛微ecology 9 /ecology_dev.zip 信息泄露漏洞
- 2024-08-01泛微OA E-cology /cloudstore/ecode/setup/ 信息泄露漏洞
- 2024-08-01泛微ecology 9 /ecology_dev.zip 信息泄露漏洞
- 2024-07-31泛微OA E-cology ProcessOverRequestByJson SQL注入漏洞
- 2024-07-30泛微OA HrmService SQL注入漏洞
- 2024-07-29泛微 E-cology getResourceInfo 存在认证绕过漏洞
- 2024-07-29泛微e-office forwardsucess.php 存在SQL注入漏洞
- 2024-07-29泛微 HrmService SQL注入漏洞
- 2024-07-29泛微 e-cology HrmService sql注入漏洞
- 2024-07-26泛微e-cology ProcessOverRequestByJson 存在 SQL 注入漏洞
- 2024-07-26泛微OA FileDownloadLocation SQL注入绕过漏洞
- 2024-07-26泛微E-Cology9 WorkPlanService 前台SQL注入漏洞
- 2024-07-26泛微 e-cology 9 WorkPlanService sql注入漏洞
- 2024-07-26泛微 E-office 10 leave_record.php sql注入漏洞
- 2024-07-25泛微OA E-Cology 远程代码执行漏洞
- 2024-07-25泛微 E-Office 10 Phar文件远程代码执行漏洞
- 2024-07-25泛微e-cology getLabelByModule SQL注入漏洞
- 2024-07-25泛微E-Mobile installOperator.do 服务端请求伪造漏洞
- 2024-07-24泛微E-Mobile installOperate.do SSRF漏洞
- 2024-07-24泛微 E-Mobile installOperate.do SSRF漏洞
- 2024-07-23泛微 E-Cology /services/WorkPlanService 存在SQL注入漏洞
- 2024-07-22泛微 E-Cology 任意文件写入漏洞
- 2024-07-19泛微e-cology QRcodeBuildAction 存在认证绕过导致 SQL 注入漏洞
- 2024-07-18泛微e-cology WorkflowServiceXml SQL注入漏洞
- 2024-07-12泛微E-mobile V6 /messageType.do SQL 注入漏洞
- 2024-07-12泛微 e-Weaver getFileViewUrl 服务器请求伪造漏洞
- 2024-07-12泛微E-mobile V6 /messageType.do SQL 注入漏洞
- 2024-07-10泛微 E-Cology9 getLabelByModule SQL注入漏洞
- 2024-07-10泛微E-OFFICEV10全版本phar反序列化漏洞
- 2024-07-10泛微 OA getLabelByModule SQL注入漏洞
- 2024-07-10泛微OA FileDownloadLocation SQL注入漏洞
- 2024-07-10泛微 E-Cology9 getLabelByModule SQL注入漏洞
- 2024-07-10泛微E-OFFICEV10全版本phar反序列化漏洞
- 2024-07-10泛微 OA getLabelByModule SQL注入漏洞
- 2024-07-09泛微e-cology getFileViewUrl 存在SSRF漏洞
- 2024-07-09泛微emobile installOperate.do 存在SSRF漏洞
- 2024-07-08泛微OA getFileViewUrl 服务端请求伪造漏洞
- 2024-07-02泛微OA BlogService接口 writeBlogReadFlag SQL注入漏洞
- 2024-07-01泛微 E-Office 10 welink-move 远程代码执行漏洞
- 2024-06-18泛微 E-Cology 管理端弱口令漏洞
- 2024-06-05泛微OA RTXAPISVR接口 敏感信息泄露漏洞
- 2024-06-03泛微 E-Office submit.php 任意文件上传漏洞
- 2024-05-21泛微 E-Cology /rest/ofs/ProcessDoneRequestByXml XXE漏洞
- 2024-05-21泛微 E-Office /general/new_mytable/block_content.php SQL注入漏洞
- 2024-05-09泛微E-Mobile SQL注入漏洞
- 2024-05-09泛微E-Mobile SQL注入漏洞
- 2024-04-26泛微 E-Office user_page.php 信息泄露漏洞
- 2024-04-26泛微 E-Office /E-mobile/App/System/UserSelect/index.php 信息泄露漏洞
- 2024-04-25泛微E-cology ifNewsCheckOutByCurrentUser.dwr 存在SQL注入漏洞
- 2024-04-23泛微E-Cology XXE漏洞
- 2024-04-23泛微E-Mobile 存在弱口令漏洞
- 2024-04-23泛微E-Message 管理界面存在任意文件读取漏洞
- 2024-04-18泛微-EMessage 远程代码执行
- 2024-04-18泛微E-Cology ProcessOverRequestByXml 任意文件读取漏洞
- 2024-04-17泛微OA Validator.ifNewsCheckOutByCurrentUser SQL注入漏洞
- 2024-04-16泛微 E-cology WorkflowServiceXml getHendledWorkflowRequestList SQL注入漏洞
- 2024-04-15泛微OA ProcessOverRequestByXml 任意文件读取漏洞
- PoC2024-04-12泛微 E-Office9 forwardsucess.php runid参数 SQL注入漏洞
- 2024-04-11泛微E-cology 8存在ProcessOverRequestByXml-文件读取
- 2024-04-11泛微 E-Office 10 Phar文件远程代码执行漏洞
- 2024-04-11泛微 E-Office 10 Phar文件远程代码执行漏洞
- 2024-04-03泛微E-Mobile /client.do 命令执行漏洞
- 2024-04-03泛微E-Mobile /client.do 命令执行漏洞
- 2024-04-02泛微E-Office /eoffice10/server/public/api/attachment/atuh-file 代码执行漏洞
- 2024-04-02泛微E-Office /eoffice10/server/public/api/attachment/atuh-file 代码执行漏洞
- 2024-04-01泛微OA /cloudstore/system/#/sys 未授权访问漏洞
- 2024-03-27泛微E-Office 存在反序列化漏洞
- 2024-03-26泛微E-Mobile 存在Struts2远程命令执行漏洞
- 2024-02-07泛微 E-Office v9.5任意文件上传漏洞
- 2024-02-07泛微e-cology FileDownloadForOutDoc SQL注入漏洞
- 2024-02-07泛微e-office atuh-file 远程代码执行漏洞 (文件上传)
- 2024-02-07泛微e-office atuh-file 远程代码执行漏洞 (恶意文件访问)
- 2024-01-25泛微 Ecology LoginSSO.jsp SQL注入漏洞
- PoC2024-01-15泛微云桥 e-Bridge addTaste接口SQL注入漏洞
- PoC2024-01-11泛微OA E-Cology Action.jsp mobile.skin.SkinAction 任意文件上传漏洞
- 2023-12-15泛微OA 远程命令执行漏洞
- 2023-12-07泛微OA E-cology getdata.jsp 用户名枚举漏洞
- 2023-11-30泛微EMobile 存在信息泄漏漏洞
- 2023-11-28泛微 EOffice 10 SQL注入漏洞
- 2023-11-16泛微E-Mobile 远程代码执行漏洞
- 2023-10-24泛微E-Cology 命令执行
- 2023-10-23泛微 E-Office sample 权限绕过 save image 文件上传漏洞
- 2023-10-23泛微 E-Office sample 权限绕过 file-upload 后台文件上传漏洞
- 2023-10-23泛微 E-Office sample 权限绕过 submit 文件覆盖漏洞
- 2023-10-23泛微 E-Office sample 权限绕过 new_edit_do 文件覆盖漏洞
- 2023-10-23泛微 E-Office sample 权限绕过 picture 文件覆盖漏洞
- 2023-10-22泛微e-office未授权访问漏洞
- 2023-10-19泛微e-office存在信息泄漏漏洞
- 2023-10-19泛微 login_other.php 任意文件读取漏洞
- PoC2023-10-18泛微e-office 未授权访问
- 2023-10-17泛微e-office 存在sql注入
- 2023-10-13泛微e-office sql注入
- 2023-10-11泛微e-office存在信息泄漏
- 2023-10-08泛微E-office9存在任意文件上传
- 2023-10-08泛微E-Mobile /emp/lang2sql 路径存在任意文件上传漏洞
- 2023-10-07泛微E-Office前台文件读取漏洞
- 2023-10-06泛微EOffice action_upload.php 任意文件上传漏洞
- 2023-10-05泛微EOffice9 webservice-json 任意文件上传漏洞
- 2023-09-22泛微 E-office json_common.php tfs SQL 注入漏洞
- 2023-09-22泛微 E-office flow_xml.php 文件 SORT_ID 参数 SQL 注入漏洞
- 2023-09-22泛微 E-office json_common.php tfs SQL 注入漏洞
- 2023-09-22泛微 E-office flow_xml.php 文件 SORT_ID 参数 SQL 注入漏洞
- 2023-09-20泛微e-office存在目录遍历漏洞
- 2023-09-19泛微e-cology存在sql注入
- 2023-09-19泛微ecology 9.0 LoginSSO.%2520jsp SQL注入漏洞
- 2023-09-11泛微OA E-Cology weaver.mgms.WorkflowRequestServlet XXE漏洞
- 2023-09-08泛微E-COLOGY XmlRpcServlet 文件读取漏洞
- 2023-09-07泛微 e-cology XmlRpcServlet 接口文件读取漏洞
- 2023-09-07泛微 e-cology XmlRpcServlet 接口文件读取漏洞
- 2023-09-06泛微E-message任意文件读取漏洞
- 2023-08-29泛微 e-office UploadFile.php文件上传漏洞
- 2023-08-28泛微E-Office 文件包含漏洞
- 2023-08-28泛微OA 后台任意文件上传漏洞
- 2023-08-13泛微E-Mobile login.do Struts2 命令执行漏洞
- 2023-08-13泛微E-Mobile login.do Struts2 命令执行漏洞
- 2023-08-11泛微 E-Office mobile_upload_save 组件任意文件上传漏洞（CVE-2023-2523）
- PoC2023-08-11泛微E-Office Init.php 任意文件上传漏洞
- 2023-08-11泛微 E-Office mobile_upload_save 组件任意文件上传漏洞（CVE-2023-2523）
- 2023-08-04泛微-协同办公 OA browser.jsp 文件 keyword 参数 SQL 注入漏洞
- 2023-08-04泛微-协同办公 OA browser.jsp 文件 keyword 参数 SQL 注入漏洞
- 2023-08-01泛微E-Mobile /messageType.do 路径存在远程命令执行漏洞
- 2023-07-18泛微云桥e-Bridge /taste/addTaste 路径存在SQL注入
- 2023-07-13泛微E-cology敏感信息泄露
- 2023-07-12泛微e-office敏感信息泄露(CVE-2023-2766)
- 2023-07-11泛微E-cology sql注入
- 2023-07-06泛微OA 前台任意SQL语句执行
- 2023-06-15泛微OA办公系统 PluginViewServlet 认证绕过漏洞
- 2023-06-15泛微E-office协同办公系统 download.php 文件 filename 参数文件读取漏洞
- 2023-06-15泛微OA办公系统 PluginViewServlet 认证绕过漏洞
- 2023-06-15泛微E-office协同办公系统 download.php 文件 filename 参数文件读取漏洞
- 2023-06-12泛微OA E-Cology XXE漏洞
- 2023-06-12泛微OA e-cology Action.jsp MobileAppUploadAction 文件上传漏洞
- PoC2023-06-06泛微E-MOBILE6 messageType.do命令执行漏洞
- 2023-06-02泛微E-Cology登录绕过
- 2023-06-01泛微OA E-Office mysql数据库信息泄漏
- 2023-05-26泛微 e-cology CheckServer.jsp 文件 SQL 注入漏洞
- 2023-05-26泛微 e-cology CheckServer.jsp 文件 SQL 注入漏洞
- 2023-05-16泛微E-COLOGY CheckServer.jsp SQL注入
- 2023-05-12泛微E-Office /uploadify/uploadify.php 任意文件上传漏洞
- 2023-04-12泛微OA uploadFileClient.jsp 任意文件上传漏洞
- 2023-03-27泛微E-Office /group_xml.php 路径存在远程命令执行
- 2023-03-27泛微E-Office /iweboffice/officeserver.php 任意文件上传漏洞
- 2023-03-27泛微E-Office /officeserver2.php 路径存在任意文件上传漏洞
- 2023-03-20泛微E-Cology9低于10.56版本browser.jsp存在SQL注入漏洞
- 2023-03-06泛微EOffice10 leave_record.php SQL注入漏洞
- 2023-03-03泛微e-cology9系统 WorkflowServiceXml SQL注入漏洞
- 2023-02-15泛微e-office /general/weibo/javascript/uploadify/uploadify.php任意文件上传漏洞
- 2022-12-30泛微OA weaver.common.Ctrl 任意文件上传漏洞
- 2022-10-26泛微eoffice未授权访问漏洞
- 2022-09-15泛微OA fileupload/uploadfile任意文件上传漏洞
- 2022-08-01泛微E-Office /E-mobile/App/Ajax/ajax.php 存在前台文件上传漏洞(CVE-2023-2523)
- 2022-08-01泛微E-office V9.5 /building/subject/tables/json.php SQL注入漏洞
- 2022-07-28泛微 /eoffice10/server/public/iWebOffice2015/OfficeServer.php 任意文件上传漏洞
- 2022-07-27泛微 /system/upgradetoe9/fileDownload.jsp 任意文件下载漏洞
- 2022-07-27泛微 /portal/SptmForPortalThumbnail.jsp 任意文件下载漏洞
- 2022-07-08泛微e-Mobile login.do登录界面存在远程命令执行
- 2022-05-10泛微OA E-Cology getSqlData SQL注入漏洞
- 2022-04-27泛微e-office /general/weibo/javascript/LazyUploadify/uploadify.php 任意文件上传漏洞
- 2021-07-29泛微eOFFice8 PHP版本UploadFile.php文件上传漏洞
- 2021-07-07泛微OA Ecology9 uploaderOperate.jsp 前台任意文件上传漏洞
- 2021-06-24泛微e-mobile client.do命令执行
- 2021-05-17泛微OA weaver.common 任意文件上传
- 2021-05-14泛微OA E-cology WorkflowServiceXml 远程代码执行漏洞
- 2021-04-30泛微OA8 前台SQL注入
- 2021-04-28泛微e-office content_4.php SQL注入漏洞
- 2021-04-28泛微OAV9 前台uploadOperation.jsp 文件上传漏洞
- 2021-04-28泛微e-office content_-3.php SQL注入漏洞
- 2021-04-28泛微e-office word_update.php SQL注入漏洞
- 2021-04-28泛微e-office content_3.php SQL注入漏洞
- 2021-04-28泛微e-office content_-4.php SQL注入漏洞
- 2021-04-28泛微ecology OA文件上传漏洞
- 2021-03-31泛微Eoffice uploadify.php文件任意文件上传
- 2021-03-16泛微云桥e-Bridge /saveYZJFile 路径任意文件读取漏洞
- 2021-03-11泛微OA bsh.servlet.BshServlet 远程代码执行漏洞
- 2021-01-19泛微OA /weaver/ln.FileDownload 任意文件读取漏洞
- 2021-01-19泛微ecology_weaver.file.SignatureDownLoad markId注入
- 2021-01-19泛微 E-cology OA 数据库配置信息泄漏
- 2021-01-19泛微OA_org.springframework.web.servlet.ResourceServlet敏感信息泄露
- 2021-01-19泛微OA系统users.data未授权访问
- 2021-01-19泛微eoffice login_other.php 注入漏洞
- 2021-01-19泛微eoffice_priv_xml.php 注入漏洞
- 2021-01-19泛微eoffice client_converter.php&userlist.php 注入与登录绕过漏洞
- 2021-01-19泛微OA_/web/careerapply/HrmCareerApplyAdd.jsp参数注入
- 2021-01-19泛微OA_/page/element/news/more.jsp参数注入
- 2021-01-19泛微OA_meeting/Maint/MeetingTypeCheck.jsp参数注入
- 2021-01-19泛微OA_/web/careerapply/HrmCareerApplyWorkView.jsp参数注入
- 2021-01-19泛微OA_/web/careerapply/HrmCareerApplyWorkEdit.jsp参数注入
- 2021-01-19泛微OA_web/careerapply/HrmCareerApplyPerView.jsp参数注入
- 2021-01-19泛微OA_/web/careerapply/HrmCareerApplyPerEdit.jsp参数注入
- 2021-01-19泛微OA_HrmCareerApplyWorkView.jsp参数注入
- 2021-01-19泛微OA_HrmCareerApplyWorkEdit.jsp参数注入
- 2021-01-19泛微OA_HrmCareerApplyPerView.jsp参数注入
- 2021-01-19泛微OA_HrmCareerApplyPerEdit.jsp参数注入
- 2021-01-19泛微OA_weaver.email.FileDownloadLocation参数注入
- 2021-01-19泛微OA uploadOperation.jsp任意文件上传漏洞
- 2021-01-19泛微OA e-cology SQL注入漏洞
- 2021-01-19泛微OA Bsh 远程代码执行漏洞
- 2021-01-19泛微E-cology OA存在SQL注入漏洞
- 2021-01-19泛微云桥e-Bridge任意文件读取漏洞
- 2021-01-19泛微OA系统 SyncUserInfo.jsp接口信息泄露漏洞
- 2021-01-19泛微Ecology OA SyncUserInfo.jsp SQL注入漏洞
- 2021-01-19泛微Ecology OA org.springframework.web.servlet.ResourceServlet目录穿越漏洞
- 2021-01-19泛微e-cology OA 远程代码执行漏洞
- 2021-01-19泛微E-office uploadify.php-任意文件上传(CVE-2023-2648)
- 2021-01-19泛微E-office upload.php-任意文件上传获得Shell
- 2021-01-19泛微OA系统officeserver.php页面TEMPLATE参数-任意页面上传
- 2021-01-19泛微E-office group_xml.php-获得Shell
- 2021-01-19泛微weaver_oa filebrowser.jsp-任意目录遍历
- 2021-01-19泛微E-office办公系统uploadify.php-文件上传漏洞
- 2021-01-19泛微OA系统jqueryFileTree.jsp页面dir参数-信息泄露
- 2021-01-19泛微OA通用系统PreDownload.jsp页面url参数-SQL注入
- 2021-01-19泛微OA系统HrmCareerApplyWorkView.jsp页面id参数-SQL注入
- 2021-01-19泛微OA系统HrmCareerApplyWorkEdit.jsp页面id参数-SQL注入
- 2021-01-19泛微OA系统HrmCareerApplyPerView.jsp页面id参数-SQL注入
- 2021-01-19泛微OA系统HrmCareerApplyPerEdit.jsp页面id参数-SQL注入
- 2021-01-19泛微OA系统com.eweaver.base.DataAction页面sql参数-SQL注入
- 2021-01-19泛微E-office-越权敏感信息泄露
- 2021-01-19泛微E-office downfile.php-任意文件下载
- 2021-01-19泛微E-office content_-99.php页面block_id参数-SQL注入
- 2021-01-19泛微E-office UserSelect-信息泄露
- 2021-01-19泛微E-Mobile Ognl表达式注入漏洞
- 2021-01-19泛微E-Mobile-Ognl表达式注入
- 2021-01-19E-Weaver泛微协同办公软件officeserver.php-文件读取漏洞