Yunke Online School System 路径遍历漏洞

Yunke Online School System is an online school software from the Chinese company Yunke. A path traversal vulnerability exists in Yunke Online School System 3.0.6 and earlier versions, which stems from a path traversal caused by the parameter url of the file application/admin/controller/Appadmin.p...

PT-2024-39187 · Unknown · Yunke Online School System

Name of the Vulnerable Software and Affected Versions: Yunke Online School System versions up to 3.0.6 Description: A vulnerability was found in the Yunke Online School System, affecting the downfile function of the file application/admin/controller/Appadmin.php. The manipulation of the url...

Aruba ClearPass Policy Manager SQL Injection Vulnerability

Aruba ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The system manages everything related to BYOD Bring Your Own Device in a single location.Policy Manager is one of the policy managers. An SQL injecti...

PT-2018-17880

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.7.6 Aruba ClearPass Policy Manager versions prior to 6.6.10-hotfix Description An authenticated SQL injection issue in Aruba ClearPass Policy Manager can lead to privilege escalation. This...

CVE-2018-7065: Improper Neutralization of Special Elements used in an SQL Command

An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this...