Multiple Vulnerabilities in GCMS 2005 of Beijing Guangdu Qimin Information Technology Co.

Ltd. Speed Sword 2005 GCMS is a portal creation and management system that integrates content management system, multi-site management and page display. SQL injection and cross-site scripting vulnerabilities exist in GCMS. An attacker can exploit the vulnerabilities to obtain sensitive database...

SQL Injection Vulnerability in MagazineCantoRequest.aspx of Beijing Jinpan Software Technology Co.

Beijing Jinpan Software Technology Co., Ltd. Jinpan collection query system is a digital library as the framework for building a new type of large-scale system adapted to the operation mechanism of digital libraries. The product MagazineCantoRequest.aspx SQL injection vulnerability exists, the...

SQL injection vulnerability in the channelcode parameter of the government website building system belonging to Beijing Hezheng Software Co.

Government website system is a set of software developed specifically for government websites. A SQL injection vulnerability exists in the channelcode parameter of the government website system belonging to Beijing Hezheng Software Co. The vulnerability allows an attacker to exploit the...

SQL Injection Vulnerability in WebappCode Parameter of Government Website Building System of Beijing Hezheng Software Co.

Government website system is a set of software developed specifically for government websites. A SQL injection vulnerability exists in the webappCode parameter of the government website system belonging to Beijing Hezheng Software Co. The vulnerability allows an attacker to exploit the...

SQL Injection Vulnerability in Cloud Recording and Broadcasting Platform of Beijing Hanboer Information Technology Co.

The Cloud Recording Platform is a platform that automatically uploads lessons recorded through multimedia teaching recording technology. A SQL injection vulnerability exists in the Cloud Recording Platform of Beijing Humber Information Technology Co. An attacker can use it to obtain sensitive...

Multiple SQL Injection Vulnerabilities in Beijing Oriental Netscape PIW Content Management System

PIW Content Management System is a content management system of Beijing Oriental Netscape Information Technology Co. PIW Content Management System has multiple SQL injection vulnerabilities. The vulnerabilities allow attackers to exploit the vulnerabilities to gain access to sensitive information...

Sensitive Information Leakage Vulnerability in Beijing Melting Point's Video Communication System

Melting Point Netcom Beijing Technology Co., Ltd. is a high-tech company engaged in unified video operation services. The video system is one of the company's systems. A sensitive information disclosure vulnerability exists in the Beijing Melting Point Webcam video system. The vulnerability allow...

SQL Injection Vulnerability in cms Collaborative Content Management System of Beijing Hezheng Software Co.

Beijing Hezheng Software Co., Ltd. is a company that provides Internet/Intranet-based management and application software solutions for the fields of enterprise informatization, network media and e-government. A SQL injection vulnerability exists in the cms collaborative content management system...

Command Execution Vulnerability in Beijing PaiNet Software Traffic Analysis Management System

Beijing Paiwang Software Co., Ltd. is specialized in the development of domestic web application layer traffic monitoring and management engine. A command execution vulnerability exists in the traffic analysis and management system of Beijing PaiNet Software. The vulnerability allows an attacker ...

File Containment Vulnerability in Beijing PaiNet Software Traffic Analysis Management System

Beijing Paiwang Software Co., Ltd. is specialized in the development of domestic web application layer traffic monitoring and management engine. A file inclusion vulnerability exists in the traffic analysis management system of Beijing Pai Networks Software. The vulnerability allows attackers to...

Beijing Jinhe C6 Collaborative Management Platform Arbitrary File Download Vulnerability

Jinhe OA is developed with asp.net and sqlserver technology and is used by many users. OA system/JHSoft.Web.CustomQuery/FileDownLoad.aspx page due to the FilePath parameter did not do ... /filter, can download any file in any directory, resulting in arbitrary file download vulnerability...

SQL injection vulnerability in the 'TID' parameter of the content management system of Beijing Oriental Wenhui Information Technology Co.

Beijing Oriental Wenhui Information Technology Co., Ltd. is an enterprise that provides users with information construction needs, and the website group content management system is the product of this company. A SQL injection vulnerability exists in the Web Group Content Management System of...

Generalized SQL Injection Vulnerability in Name Parameter of Beijing Zixin Newspaper Technology Digital Newspaper System

Beijing Purple New Digital Newspaper System is a perfect, efficient, stable, reliable, flexible and scalable digital workflow management system for combined editions. A generic SQL injection vulnerability exists in the name parameter of the Beijing Purple New Newspaper Technology Digital Newspape...

Online Training Management System Generalized Arbitrary File Download Vulnerability of Beijing Jianfeng Hexun Technology Co.

Peak Hutchinson's Online Training Management System is a software system that provides full-process management of training activities for learning organizations. There is a generic arbitrary file download vulnerability in the online training management system of Beijing Summit Hexun Technology Co...

SQL Injection and Arbitrary File Upload Vulnerabilities in Rural Electronic Monitoring Platform of Beijing Zhongnong Xinda Information Technology Co.

Beijing Zhongnong Xinda Information Technology Co., Ltd. is a provider of comprehensive services for three rural informatization, and the Rural Electronic Monitoring Platform is one of the company's monitoring platforms. A SQL injection and arbitrary file upload vulnerability exists in the Rural...

Remote Command Execution Vulnerability in LotAPP Application Delivery System of Beijing Huaxia Innovation Technology Co.

Ltd. is a company that applies the delivery of independent intellectual property rights. LotAPP is one of the company's applications. A remote command execution vulnerability exists in the LotAPP application delivery system of Beijing Huaxia Innovation Technology Co. An attacker could exploit the...

SQL injection vulnerability in netrep/index.jsp parameter of financial statement system of Beijing Jiuji Software Co.

Financial Statement System is a financial bookkeeping system. A SQL injection vulnerability exists in the netrep/index.jsp parameter of the financial statement system of Beijing Jiuqi Software Co. Ltd. that allows an attacker to exploit the vulnerability to obtain sensitive information from the...

SQL Injection Vulnerability in the id Parameter of a Government System Developed by Beijing Xiangyu Leader Software Co.

Ltd. is a high-tech enterprise dedicated to the research and development of office software for e-government applications and market development. A SQL injection vulnerability exists in the id parameter of the government system developed by Beijing Xiangyu Leader Software Co., Ltd. which allows...

SQL Injection Vulnerability in Websiteid Parameter of Government Information System of Beijing Xiangyu Leading Software Co.

One-stop government information disclosure system is a management system that realizes the construction of open government columns based on website groups. There is a SQL injection vulnerability in the websiteid parameter of the one-stop government information disclosure system of Beijing Xiangyu...

某图书系统通用注入一枚

简要描述： RT 详细说明： http://www.infosea.com.cn/yonghu.html 北京清大新洋科技有限公司 注入文件：opac/dzxxxgjg.jsp 测试案例： http://124.207.106.138:8070/opac/dzxxxgjg.jsp txdz=88952634&yzbm=88952634&dhhm=88952634&dzyj=88952634&dztm=88952634 http://218.241.174.148:8070/opac/dzxxxgjg.jsp...