Approved changes feed: RSS · Atom
cpe:2.3:a:jiusi:oa:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jiusi (ade73bac-44ca-5a56-a78b-ac8bd8a0f40e) |
|---|---|
| Product | Oa (5312431f-d3b7-5cd8-bfe2-ab026228458b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-13249 |
vulnerable | 2026-06-08 07:04:31.851523 |
Jiusi OA OfficeServer unrestricted upload
MEDIUM (6.3)
A security vulnerability has been detected in Jiusi OA up to 20251102. This affects an unknown function of the file /OfficeServer?isAjaxDownloadTemplate=false of the component OfficeServer Interface. Such manipulation of the argument FileData leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-11-16T11:32:05.743Z
Updated: 2025-11-17T19:00:38.836Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3467 |
vulnerable | 2026-06-08 05:48:21.129194 |
Jiusi OA hntdCustomDesktopActionContent sql injection
MEDIUM (5.5)
A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The manipulation of the argument inforid leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-210709 was assigned to this vulnerability.
Published: 2022-10-12T00:00:00.000Z
Updated: 2025-04-15T13:45:24.053Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.