Oa System

CVEs (1)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-18019	Xinhu OA System Xinhu OA System	Hig	0.49	7.5	0.02		Apr 28, 2021	SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "mode_worcAction.php" component.

CVE-2020-18019HigApr 28, 2021
Xinhu OA System
Xinhu OA System
risk 0.49cvss 7.5epss 0.02
SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "mode_worcAction.php" component.