Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Jiusi OA hntdCustomDesktopActionContent sql injection
Vulnerability Description
A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The manipulation of the argument inforid leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-210709 was assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
对消息或数据结构的处理不恰当
Vulnerability Title
Beijing Jiusi Collaborative Software Office System SQL注入漏洞
Vulnerability Description
Beijing Jiusi Collaborative Software Office System（北京九思协同软件办公系统）是中国北京九思协同软件（Beijing Jiusi Collaborative Software）公司的一个 OA 办公系统。 Beijing Jiusi Collaborative Software Office System OA 存在SQL注入漏洞，该漏洞源于jsoa/hntdCustomDesktopActionContent 的未知功能，攻击者利用该漏洞可以通过参数in
CVSS Information
N/A
Vulnerability Type
N/A