Weak Password Vulnerability in DCN DCME Multicore Engine

Digital China Group Corporation focuses on providing you with full-stack cloud services, including cloud management services such as cloud management, cloud resource procurement, and proprietary cloud services, as well as data services such as data desensitization and video cloud for various...

Weak Password Vulnerability in XR20-GM of Hangzhou Dipu Technology Co.

XR20-GM is a new-generation router product based on the multi-core processor architecture of DIPTECH, which realizes the seamless integration of routing and switching with security and application delivery. The XR20-GM has a weak password vulnerability that can be exploited by attackers to log in...

Input validation

An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page...

CVE-2020-35614 [20201105] - Core - User Enumeration in backend login

An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page...

CVE-2020-35614

Joomla! is affected from 3.9.0 through 3.9.22 by a backend login user enumeration vulnerability caused by improper handling of the username. The issue enables an attacker to infer valid usernames via the backend login page. Remediation per linked sources is to update Joomla! to a version that fix...

CVE-2020-35614: Undefined Security Weakness

An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page...

PT-2020-17366 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.9.0 through 3.9.22 Description: An issue was discovered that leads to a user enumeration attack vector in the backend login page due to improper handling of the username. Recommendations: For Joomla! versions 3.9.0 through...

Weak Password Vulnerability in UCM Collaborative Communication Platform of Beijing Zhongchuang Vision Technology Co.

UCM Collaborative Communication Platform is a SIP communication control hardware device, which can realize traditional video conference system terminal registration, multi-party conference MCU, device management, firewall traversal and so on. There is a weak password vulnerability in the UCM...

Weak Password Vulnerability in Asus Computer Incorporated RT-N10E B1

Offering easy CD-ROM-free installation and stable data transfer rates, the RT-N10E B1 is a basic solution for wireless network setup. A weak password vulnerability exists in the Asus Computer Incorporated RT-N10E B1. The vulnerability can be exploited by an attacker to log into the router's backe...

Stored Cross-Site Scripting Vulnerability at ShuipfCMS Backend Login

ShuipFCMS is a content management system based on ThinkPHP framework as the core and developed in an independent grouping approach. A stored cross-site scripting vulnerability exists in the ShuipfCMS backend login, which can be exploited by an attacker to remotely obtain an administrator cookie...

BEESCMS Backend Login suffers from SQL Injection Vulnerability

BEESCMS is an enterprise website management system based on PHP+Mysql architecture. BEESCMS backend login has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Logic Flaw Vulnerability in Tanto CMS V1.2

Skyway CMS is a simple website management system. A logic flaw exists in Tanto CMS V1.2, which can be exploited by an attacker to log in to the back-end of a website without an account password...

[20201105] - Core - User Enumeration in backend login

Improper handling of the username leads to a user enumeration attack vector in the backend login page...

Command Execution Vulnerability in 1GE+ WIFI Routers

DIGISOL provides complete integrated communication system solutions. Command execution vulnerability exists in 1GE+ WIFI router. An attacker can log into the backend via a weak password and remotely execute commands...

Weak Password Vulnerability in CMCC Tietong Yu Routing

CMCC Intelligent Products Branch is a branch of CMCC specializing in intelligent manufacturing, intelligent integration and intelligent operation. A weak password vulnerability exists in CMCC Tietong Yu Route, which can be exploited by attackers to log into the system backend...

Stored Cross-Site Scripting Vulnerability in jbr-pcms Backend Login Page

Wuhan Jinbare Technology Co., Ltd. is a company that provides high-quality Internet image design, e-commerce, mobile development, intelligent platform research and interactive marketing planning and services. A stored cross-site scripting vulnerability exists in the background login page of...

Unauthorized Access Vulnerability in Superstar Huiya E-Books

Super Star Huiya eBooks is currently the world's largest Chinese online digital library, providing a large number of eBook resources for reading, including literature, economics, computers, and more than 50 categories. Unauthorized access vulnerability exists in Super Star Huiya eBooks, which can...

SQL Injection Vulnerability in Baishuo Networks CMS Admin Backend Login

Baishuo web cms management system is a content management system for text processing, image processing, flash animation, sound and video streaming, images and even email archives. A SQL injection vulnerability exists in the backend login of Bystronic's cms management system, which can be exploite...

SQL Injection Vulnerability in the Backend Management Login Interface of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system back-end management login interface SQL injection vulnerability, attackers can use this vulnerability to obtain sensitive database information...

Logic Flaw Vulnerability in the Backend Management Login Interface of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system back-end management login interface has a logic flaw vulnerability that can be exploited by an attacker to violently break the administrator's password...