PT-2020-1429

Name of the Vulnerable Software and Affected Versions Genexis Platinum-P4410-V2 versions 1.28 and earlier Genexis Platinum-4410 versions 2.1 and earlier Description The issue is related to insufficient authentication in the cgi-bin/index2.asp component of the Genexis Platinum-P4410-V2 and Genexis...

CVE-2020-6170: Exposure of Sensitive Information to an Unauthorized Actor

An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML source code of the cgi-bin/index2.asp URI...

Shijiazhuang Jiufan Network Technology Co., Ltd. builds website system pr***.asp page with SQL injection vulnerability

Shijiazhuang Jiufan Network Technology Co., Ltd. is a company focusing on website construction, website optimization and other business. Shijiazhuang Jiufan Network Technology Co., Ltd. building system pr.asp page there is a SQL injection vulnerability, attackers can use the vulnerability to obta...

SQL Injection Vulnerability in in***.asp Page of Fushun Jingwei Website Building System

Fushun Jingwei Network Technology Development Co., Ltd. was founded in 2002, the scope of services covering website construction and promotion, domain name registration, web hosting, graphic and animation design, software development, network and system integration engineering, digital video,...

December 10, 2019-KB4533002 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1903 and Windows Server 1903 RTM and Windows 10, version 1909 and Windows Server, version 1909

None None...

Open Redirect Payload List

Unvalidated redirects and forwards are possible when a web application accepts untrusted input that could cause the web application to redirect the request to a URL contained within untrusted input. By modifying untrusted URL input to a malicious site, an attacker may successfully launch a phishi...

SQL Injection Vulnerability in VANOC Enterprise Website Management System cm***_ba***_mo***.asp Page

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. Vanno enterprise website management system cmbamo.asp page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in pr***.asp Page of Yiming Networks Website Builder System

Yiming Networks is an organization engaged in website construction, webpage production, website promotion, domain name registration, web hosting, enterprise mailbox, space rental, and other Internet product-related services. A SQL injection vulnerability exists in the pr.asp page of Yiming's...

October 24, 2019-KB4519573 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1903 and Windows Server 1903 RTM and Windows 10, version 1909 and Windows Server, version 1909

None None...

October 15, 2019-KB4519572 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803

None None...

SQL injection vulnerability in c***w.asp page of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the professional network companies, is based on the Internet to provide a comprehensive e-commerce...

Code injection

An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location.href = "/dirlogin.asp"' line in a .asp file. This provides access to dstatus.asp, version.asp, ddhcptbl.asp, and dacl.asp...

Jieyang City Jike Computer Network Co., Ltd. website building system pr***_li***.asp suffers from SQL injection vulnerability.

Jieyang City, Jike Computer Network Co., Ltd. specializes in Internet business information, providing a full range of services from domain name registration, web hosting rental, web page design, production, maintenance, CGI writing, database design to the home page of the network of publicity,...

SQL injection vulnerability in gs***.asp page of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the professional network companies, is based on the Internet to provide a comprehensive e-commerce...

SQL injection vulnerability in asp website builder system pr***.asp of Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

SQL injection vulnerability in asp website builder system ca***.asp of Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

SQL injection vulnerability in asp website builder system ***ow.asp at Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

SQL Injection Vulnerability in *z.asp System of Guilin Fate Network Technology Co.

Ltd. is committed to the low-end market, serving small and medium-sized enterprise customers as well as individuals, and doing a good job with every website. There is a SQL injection vulnerability in z.asp, which can be exploited by attackers to obtain database information...

SQL injection vulnerability in sh***.asp page of website building system of Circle of Friends Network Technology Co.

Circle of Friends Network Technology Co., Ltd. is committed to website construction, software product development, technological innovation and website optimization. There is a SQL injection vulnerability in the sh.asp page of the website building system of Circle of Friends Network Technology Co...

SQL Injection Vulnerability in Xi'an Power Infinite Information Technology Co.

Chengdu Power Unlimited Technology Co., Ltd. is an Internet company that builds marketing websites and Internet marketing services for small and medium-sized enterprises. Chengdu Power Infinite Technology Co., Ltd. building system ne.asp page cid parameter exists SQL injection vulnerability,...