Vulnerability of Universal Password Login in Changmeng Network Website Building System

Changmeng Network is a professional team specializing in providing website construction, website promotion and network marketing solutions under the banner of Guangzhou Xingmeng Animation Design Company Limited a total of three departments: Animation Department, Product Design Department the...

Cookie Spoofing Vulnerability in Website Building System of Henan Yipug Computer Technology Co.

Henan Yipug Computer Technology Co., Ltd. is a service organization that focuses on enterprise network marketing landing. Ltd. building system there is a cookie deception vulnerability, the attacker has been verified through the success of the cookie, the use of loopholes without authentication t...

Universal Password Login Vulnerability in Tatsui Import Preamplifier System

Shanghai Chenrui Information Technology Company is a wholly-owned subsidiary of the Third Research Institute of the Ministry of Public Security. With information security as its main business direction, Chenrui is mainly engaged in the development and integration of products in computer network...

Universal password login vulnerability in Suzhou Kodak's security monitoring video platform.

MSS Streaming Media Server is a surveillance video streaming platform from Suzhou Kodak Technology Co. A universal password login vulnerability exists in the Suzhou KODAK Security Surveillance Video Platform. An attacker can utilize the vulnerability to log in to the backend, view all video files...

Authentication Flaw Vulnerability in CMS Made Simple Version 2.2.7

CMS Made Simple is an open source content management system. It is built using PHP and Smarty Engine , which separates content , functionality and templates . CMS Made Simple version 2.2.7 suffers from an authentication flaw vulnerability, which can be exploited by an attacker to elevate an...

Override Access Vulnerability in SiteServer CMS Administration Backend

SiteServer CMS is a web content management system developed by Beijing Billion Software Technology Development Co. A vulnerability exists in the management background of SiteServer CMS. The vulnerability is due to the background access control using JWT technology for identity authentication, HTT...

Variable Override Vulnerability in MetInfo Version 5.3.19 at Password Retrieval

MetInfo is a Content Management System CMS developed using PHP and Mysql. A variable override vulnerability exists in MetInfo version 5.3.19 at the password retrieval. An attacker can exploit the vulnerability to obtain a password reset link, bypass authentication to change the administrator...

CVE-2017-16635

In TinyWebGallery v2.4, an XSS vulnerability is located in the mkname, mkitem, and item parameters of the Add/Create module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the TWG Explorer item listing. The request method to...

Cross site scripting

In TinyWebGallery v2.4, an XSS vulnerability is located in the mkname, mkitem, and item parameters of the Add/Create module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the TWG Explorer item listing. The request method to...

CVE-2017-16635

In TinyWebGallery v2.4, an XSS vulnerability is located in the mkname, mkitem, and item parameters of the Add/Create module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the TWG Explorer item listing. The request method to...

CVE-2017-11136

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. It uses RSA to exchange a secret for symmetric encryption of messages. However, the private RSA key is not only stored on the client but transmitted to the backen...

CVE-2017-11136

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. It uses RSA to exchange a secret for symmetric encryption of messages. However, the private RSA key is not only stored on the client but transmitted to the backen...

Universal Password Login Vulnerability in Longcai MX of Longcai Technology Inc.

Longcai MX is a marketing website that caters to consumer needs and buying desires. A universal password login vulnerability exists in the '/manage' page of Longcai MX under Longcai Technology. An attacker can exploit the vulnerability to log into the system backend, view sensitive information or...

ZYCH Free Planning Enterprise Website Management System Exists Universal Password Login Vulnerability

ZYCH Free Planner Enterprise Website Management System is an intelligent ASP website management program based on Free Planner Enterprise Website Management System. A universal password login vulnerability exists in the '/admin/login.asp' page of ZYCH Free Planning Enterprise Website Management...

SQL Injection Vulnerability in Nanchang Jiarui Website Building System

Nanchang Jiarui Technology is a company specializing in all aspects of the application of enterprise information technology services, business scope includes: mobile APP development, website construction, software development, full network promotion, micro letter marketing. A SQL injection...

Unauthorized access vulnerability in HP Photosmart 5520 series printers

The HP Photosmart 5520 series is a mid-range inkjet printer. An unauthorized access vulnerability exists in the HP Photosmart 5520 series printer. The vulnerability allows an attacker to enter the backend of the printer and view sensitive information or perform unauthorized operations...

QNAP Photo Station and Music Station Authentication Bypass Vulnerability

QNAP Photo Station, Music Station is an application that displays photos and music stored in all shared folders. An authentication bypass vulnerability exists in QNAP Photo Station version 5.2.4 and Music Station version 4.8.4. The vulnerability allows attackers to bypass authentication to enter...

csrf vulnerability in dedecms v5.7 latest version

Dedecms is an open source PHP open source website management system. A csrf vulnerability exists in the latest version of dedecms v5.7. Allows attackers to exploit the vulnerability to forge form links and trick administrators to click and add backend accounts...

ZYCHCMS V04 Login Authentication Bypass Vulnerability in /admin/login.asp File

ZYCHCMS is an enterprise website management system. A login authentication bypass vulnerability exists in the /admin/login.asp file in ZYCHCMS V04. The vulnerability allows attackers to bypass authentication to enter the backend and obtain sensitive information...

Unauthorized Access Vulnerability in Zhongke Dayang 3GLive Multimedia Gateway

ZTE 3GLive multimedia is relying on 3G network technology to provide a new means of live broadcasting. Unauthorized access vulnerability exists in the 3GLive Multimedia Gateway, which can be exploited by unauthorized attackers to access /monitor?lan=1 to directly enter the backend...