SQL injection vulnerability in the searchKeys parameter of newspaper system advresult.jsp page at Beijing Zixin Newspaper Technology Development Co.

Zixin Newspaper Digital Newspaper System is a professional information-based multimedia publishing platform for internal journals, newspapers and magazines in different industries, such as newspapers, magazines, schools, groups of enterprises, governments and non-profit organizations. A SQL...

SQL injection vulnerability in the searchKeys parameter of the newspaper system createcd.jsp page at Beijing Zixin Newspaper Technology Development Co.

Zixin Newspaper Digital Newspaper System is a professional information-based multimedia publishing platform for internal journals, newspapers and magazines in different industries, such as newspapers, magazines, schools, groups of enterprises, governments and non-profit organizations. SQL injecti...

Generalized SQL Injection Vulnerability in Abilify Multiservice Smart Gateway

Abilify Multi-service Smart Gateway is a product of Beijing Hai Rui Xing Ye Technology Co. A generic SQL injection vulnerability exists in Abilify Multi-service Smart Gateway. It allows attackers to utilize common SQL injection tools to obtain sensitive database information...

Arbitrary File Download Vulnerability in Research Management System of Beijing Eplag Technology Co.

Beijing Eplag Technology Co., Ltd. scientific research management system is a set of informatization system applied to various scientific research institutes and colleges and other research institutions to carry out all-round scientific research management such as scientific research project...

Remote Command Execution Vulnerability in the $format Parameter of the Video Device System of Clearstream Xun (Beijing) Technology Co.

StreamOcean, Inc. is the world's leading high-technology company dedicated to delivering high-definition interactive video over the Internet, with its fully independent intellectual property rights in the StreamOcean Video Delivery Network SOVDN, which provides the infrastructure for full video...

Arbitrary File Upload Vulnerability in PatrolFlow Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

PatrolFlow is a multi-service security gateway intelligent management platform of Beijing Byzoro Network Technology Co. An arbitrary file upload vulnerability exists in the PatrolFlow multi-service security gateway intelligent management platform of Beijing Byzoro Network Technology Co. The...

Generalized SQL Injection Vulnerability in Haitian OA Office System of Beijing Lianjie Haitian Technology Co.

Haitian OA office system is an office system software developed by Beijing Lianjie Haitian Technology Co. Ltd. Haitian OA Office System suffers from a generic SQL injection vulnerability, which allows attackers to exploit the vulnerability to obtain sensitive information...

Multiple Vulnerabilities in Beijing Wisdom Technology v2 Video Conferencing System

Beijing Wisdom Technology v2 Video Conferencing System is a video conferencing system. There are several vulnerabilities in the v2 Video Conferencing System. It allows attackers to upload webshell and gain server privileges...

Arbitrary File Containment Vulnerability in e-Procurement Platform of Beijing Yizaitong Information Technology Co.

Beijing Yizaitong Information Technology Co., Ltd. e-procurement platform is a system for online procurement transactions. A file inclusion vulnerability exists in the e-procurement platform of Beijing Yizaitong Information Technology Co., Ltd, which can be exploited by attackers to download...

Authentication Bypass Vulnerability in the Library System of Beijing Dingfeng Jinye Technology Co.

Ltd. library system is widely used in various enterprises and institutions, schools and universities and other libraries. It mainly includes several modules such as system management, system query, system setting, printing, borrowing and returning books. There is an authentication bypass...

SQL injection vulnerability in the library system showpic.aspx?id= parameter of Beijing Dingfeng Jinye Technology Co.

Ltd. library system is widely used in various enterprises and institutions, schools and universities and other libraries. It mainly includes several modules such as system management, system query, system setting, printing, borrowing and returning books. There is a SQL injection vulnerability in...

SQL injection vulnerability in the library system bookinfo.aspx?id= parameter of Beijing Dingfeng Jinye Technology Co.

Ltd. library system is widely used in various enterprises and institutions, schools and universities and other libraries. It mainly includes several modules such as system management, system query, system setting, printing, borrowing and returning books. There is a SQL injection vulnerability in...

Generalized SQL Injection Vulnerability in Beijing Zixin Newspaper Communication Technology Digital Newspaper System

Beijing Purple New Digital Newspaper System is a perfect, efficient, stable, reliable, flexible and scalable digital workflow management system for combined editions. A generic SQL injection vulnerability exists in the Beijing Purple New Newspaper Technology Digital Newspaper System, which allows...

SQL Injection Vulnerability in Transmission Interactive Video Equipment at Clearstream (Beijing) Technology Co.

StreamOcean, Inc. is the world's leading high-technology company dedicated to delivering high-definition interactive video over the Internet, with its fully independent intellectual property rights in the StreamOcean Video Delivery Network SOVDN, which provides the infrastructure for full video...

Struts2 Remote Command Execution Vulnerability in OA System of Beijing Hurong Times Software Co.

Beijing Hurong Times Software Co., Ltd OA system is a set of daily operation and management application system for organizations. The OA system of Beijing Hurong Times Software Co., Ltd. suffers from a Struts2 remote command execution vulnerability, which can be exploited by an attacker to remote...

Unauthorized Access Vulnerability in Zhiyuan Office Software of Beijing Zhiyuan Xiechuang Software Co.

UFIDA Zhiyuan A6 Collaboration Office Software is an office system developed by Beijing Zhiyuan Xiechuang Software Co. An unauthorized access vulnerability exists in Beijing Zhiyuan Xiechuang Software Co., Ltd.'s Zhiyuan Office Software, which allows an attacker to exploit this vulnerability to...

Founder Fetion Handles FIT File Buffer Overflow Vulnerability

Positive Fetion is a comprehensive typesetting software integrating images, texts and forms developed by Beijing Founder Electronics Co. A buffer overflow vulnerability exists in Founder Fetion's handling of FIT files, which allows an attacker to exploit the vulnerability to construct a malformed...

Founder Fetion Handles FIT File Memory Corruption Vulnerability

Founder Fetion is a comprehensive typesetting software integrating images, texts and forms developed by Beijing Beifang Founder Electronics Co. A memory corruption vulnerability exists in Founder Fetion's handling of FIT files, which allows attackers to exploit the vulnerability to construct...

java deserialization vulnerability in report management system of Beijing Jiuqi Software Co.

Beijing Join-Cheer Software Co., Ltd. is a management software provider in China, which is mainly engaged in the research and development and promotion of software in the fields of report management software, big data, group control, e-government affairs and mobile Internet. A java deserializatio...

SQL Injection Vulnerability in the Teaching System of Beijing Oriental Centaline Education Technology Co.

Oriental Centrum is a developer, supplier and solution provider in the field of multimedia display and interactive teaching applications. A SQL injection vulnerability exists in the teaching system of Beijing Oriental Centrum Education Technology Co. Ltd. where an attacker can obtain database...