CVE-2024-25507

概要

参考情報

• gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d · Exploit

ruvaroa のその他の脆弱性

• CVE-2024-25533緊急 9.4Error messages in RuvarOA v6.01 and v12.01 were discovered to leak the physical path of the website (/WorkFlow/OfficeFileUpdate.aspx). This …
• CVE-2024-25532緊急 9.8RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the bt_id parameter at /include/get_dict.aspx.
• CVE-2024-25528中 5.9RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_s…
• CVE-2024-25531緊急 9.8RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/SearchCondiction.a…
• CVE-2024-25530緊急 9.8RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/get_find_condictio…