Mata message board backend has a universal password login vulnerability

Marta Message Board is a no-refresh message board program. A universal password login vulnerability exists in the background of Marta Message Board, which can be exploited by an attacker to log in directly to the background...

Weak password vulnerability in H3C ACG1000-M switches

Xinhua San Technologies Co., Ltd. has a full range of overall digital infrastructure capabilities in computing, storage, networking and security, and provides one-stop digital solutions, including cloud computing, big data, intelligent connectivity, information security, new security, Internet of...

TYPO3 cross-site scripting vulnerability (CNVD-2019-40295)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in the back-end login box in TYPO3. The vulnerability stems from the lack of proper validation of client-side data by the WEB application, which...

Weak Password Vulnerability in Huasan ER5100 Router

Ltd. Huasan, mainly provides research, development, production, sales and services of IT infrastructure products and solutions. A weak password vulnerability exists in the Huasan ER5100 router, which can be exploited by an attacker to log into the router's backend...

Weak Password Vulnerability in Huasan ER6300G2 Router

Ltd. Huasan, mainly provides research, development, production, sales and services of IT infrastructure products and solutions. A weak password vulnerability exists in the Huasan ER6300G2 router, which can be exploited by an attacker to log into the router's backend...

CVE-2019-12935

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI...

CVE-2019-12935

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI...

CVE-2019-12935: Improper Neutralization of Input During Web Page Generation

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI...

Logic Flaw Vulnerability in Juhaoyong CMS

JuhaoyongCMS is a set of cms developed by Juhaoyong Enterprise Website Management System. Juhaoyong CMS has a logic flaw vulnerability, an attacker can be forged through a cookie to log in to the backend without an account password...

Arbitrary File Upload Vulnerability in Employment Information Network

Huimeng Software is committed to improving the information management level of enterprises or government organizations through professional products and services. The Employment Information Network has an arbitrary file upload vulnerability that can be exploited by an attacker to log in to the...

Weak Password Vulnerability in e5e Website Management System Wangzt 3.0.4 Enterprise Edition

Hunan Fifth Element Network Technology Development Co., Ltd. is a company specializing in Internet information services, enterprise application software development and e-commerce platform construction enterprises. Weak password vulnerability exists in e5e website management system Wangzt3.0.4...

Vulnerabilities in the Website Building System of Shanghai JUE Solutions Information Technology Co.

Ltd. provides Shanghai professional website construction, WAP website construction, mobile APP development, website revision, web design, website promotion, integrated marketing. There is a vulnerability in the website builder system that can be exploited by an attacker to log in to the backend...

Weak Password Vulnerability in Tianxing Security One-way Import System Database

Tianxing Security One-way Import System is a network security product of Beijing Tianxing Net Security Information Technology Co., Ltd. for one-way data transmission across security domains. The product consists of importing preamplifier PAS and importing server IAS, which can provide a...

Code Execution Vulnerability in School Worry-Free School Website System

School Worry-Free School Website System is a universal school website management system for primary and secondary schools. A code execution vulnerability exists in the SchoolWorryFree School Website System. An attacker can exploit the vulnerability to log in to the backend, upload Trojan horse, a...

QCMS最新版3.0.1后台登录验证可绕过，结合任意文件上传可前台getshell

...

SQL Injection Vulnerability in Chengdu JWT jwcms

Chengdu, Chengdu, this network technology is a Chengdu, engaged in website planning, web design, website construction and development, website optimization, Internet marketing and other professional services in the field of network technology limited company. Chengdu JINWEI TECHNOLOGY jwcms SQL...

Cicada Knowledge Enterprise Portal open source version 6.5 cross-site scripting vulnerabilities at the user login and backend logins

Cicada Knowledge Enterprise Portal System is an enterprise portal system designed for enterprise marketing use. Cicada Knowledge Enterprise Portal open source version 6.5 user login and background login at the cross-site scripting vulnerabilities, attackers can use the vulnerability to insert...

D-Link DIR Series Routers Remote Command Execution Vulnerability

The DIR series is a series of cloud router products from AUO D-Link. A remote command execution vulnerability exists in the D-Link DIR series routers. An attacker can obtain the router's backend login credentials and execute arbitrary code through the router's public web portal...

Weak password vulnerability in digital learning platforms for vocational institutions

The digital learning platform for vocational colleges and universities is an all-round and personalized informatization solution for school education and corporate learning provided by Beijing Huidong Times Technology Co. There is a weak password vulnerability in the Digital Learning Platform for...

Chengdu Firefox Technology Co., Ltd. website building system full version of the existence of cookie spoofing vulnerability

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services, professional network companies, is based on the Internet to provide a comprehensive e-commerce consulting a...