育碁數位科技｜a+HRD - 存在2個漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-10833-e3a53-1.html
• https://www.aenrich.com.tw/news_events/tvn-202604-security.html
• https://www.twcert.org.tw/newepaper/cp-151-10833-e3a53-3.html
• https://tp2rc.tanet.edu.tw/node/963
• https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/62415e11-4221-45bd-841f-11c947c5ed29/

Related Vulnerabilities

• 育碁數位科技 a+HRD - Server-Side Request Forgery (SSRF)
• 育碁數位科技 a+HRD - Reflected Cross-site Scripting(XSS)
• 育碁數位科技 a+HRD - Argument Injection
• 育碁數位科技 a+HRD - Exposure of Sensitive Data
• 育碁數位科技 a+HRD - Deserialization of Untrusted Data
• 育碁數位科技 a+HRD - Improper Authentication
• 育碁數位科技 a+HRD - Path Traversal
• 育碁數位科技 a+HRD - Broken Access Control