Skip to content
OpenAdvisories

Vendor

Uniong

12 known vulnerabilities.

Products

8 results · Clear filters · Feed

  • Medium 6.5

    Uniong|WebITR - Arbitrary File Read

    WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

  • Medium 6.5

    Uniong|WebITR - SQL Injection

    WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

  • Medium 6.5

    Uniong|WebITR - SQL Injection

    WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

  • Medium 6.5

    Uniong|WebITR - Arbitrary File Reading through Path Traversal

    WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

  • Medium 6.5

    Uniong|WebITR - Arbitrary File Reading through Path Traversal

    WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

  • Medium 6.5

    Uniong|WebITR - Arbitrary File Reading through Path Traversal

    WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

  • Medium 6.5

    Uniong|WebITR - Arbitrary File Reading through Path Traversal

    WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

  • Medium 6.1

    Uniong WebITR - Open Redirect

    WebITR from Uniong has an Open Redirect vulnerability, which allows unauthorized remote attackers to exploit this vulnerability to forge URLs. Users, believing they are accessing a trusted domain, can be redirected to another page, potentially leading to phis…