CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

PT-2023-28710 · Netis · Netis 360Rac1200

Name of the Vulnerable Software and Affected Versions: Netis 360RAC1200 version 1.3.4517 Description: The issue allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management. Recommendations: For...

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

Cross site scripting

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

PT-2023-20797 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: mccms version 2.6.1 Description: An issue in the Backend management interface, specifically in System Configuration-Cache Configuration-Cache security characters, allows remote attackers to cause a denial of service. Recommendations: For mccm...

Logic Flaw Vulnerability in Backend Management of E-House Real Estate System

Ltd. is a company whose business scope includes: Internet data services, network and information security software development, software and information technology services, software development, information technology consulting services, information processing and storage support services,...

Zoo Management System save_event Arbitrary File Upload Vulnerability

Zoo Management System is a zoo management system. It provides an online and automated platform for zoo organizations to manage their daily records. An arbitrary file upload vulnerability exists in Zoo Management System v1.0, which arises from a lack of validation of uploaded files at the image...

CVE-2022-40924

Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "saveanimal" file of the "Animals" module in the background management system...

PT-2022-25622

Name of the Vulnerable Software and Affected Versions Zoo Management System version 1.0 Description The issue is related to an arbitrary file upload vulnerability in the picture upload point of the "save animal" file of the "Animals" module in the background management system. Recommendations For...

RuoYi 跨站脚本漏洞

RuoYi is a backend management system for individual developers of China RuoYi RuoYi. A security vulnerability exists in RuoYi v4.7.3 and below, which stems from an arbitrary file upload vulnerability in the backend management module that allows an attacker to execute arbitrary code via a speciall...

CVE-2022-24844

Gin-vue-admin is affected by a SQL injection in the server/service/system/sys_auto_code_pgsql.go path when using PostgreSQL and JWT-based authentication. The issue exists in versions prior to 2.5.1 and is resolved by upgrading to 2.5.1; there are no publicly documented workarounds in the provided...

Weak Password Vulnerability in Myeye Backend Administration

Myeye is a monitoring and control system. A weak password vulnerability exists in the backend management of Myeye, which can be exploited by an attacker to log in to the system backend and obtain sensitive information...

SQL Injection Vulnerability in Employment Service Backend Management System of Chongqing Softfox Information Technology Co. Ltd (CNVD-2021-49118)

Chongqing Softfox Information Technology Co., Ltd. has long been focusing on the Internet + intelligent employment service platform and solutions. There is a SQL injection vulnerability in the background management system of Chongqing Softfox Information Technology Co., Ltd's employment service,...

SQL Injection Vulnerability in Employment Service Backend Management System of Chongqing Softfox Information Technology Co. Ltd (CNVD-2021-49529)

Chongqing Softfox Information Technology Co., Ltd. has long been focusing on the Internet + intelligent employment service platform and solutions. SQL injection vulnerability exists in the background management system of employment service of Chongqing Softfox Information Technology Co., Ltd, whi...

Unauthorized access vulnerability in Isha's back-office management system

Isha Backend Management System is a .NET Core Web-based development system. An unauthorized access vulnerability exists in Yisha Backend Management System, which can be exploited by attackers to obtain sensitive information...

File upload vulnerability in Speedcat ERP backend management system

Ltd. is an e-commerce management product specially developed for cross border e-commerce platforms such as Selling, Amazon and Ebay. There is a file upload vulnerability in the Quickcat ERP backend management system, which can be exploited by attackers to control the server by uploading Trojan...