SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70798)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70797)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70835)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

File upload vulnerability in the comprehensive management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd (CNVD-2020-70800)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A file upload vulnerability exists in the comprehensive management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to gain server...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70830)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the comprehensive management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70837)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70838)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in the Website Building System of Beijing Jingji Technology Co.

Beijing Jingji Technology Co., Ltd - 11 years of service Internet basic information services. The main business are: website filing business, hosting, space rental, domain name registration, website construction, small program development, network operation and maintenance, one-stop solution...

File Upload Vulnerability in Microconsultation Communication System of Beijing Zhongwang Network Technology Co. Ltd (CNVD-2020-72364)

MicroMessage is an open, lightweight, cross-platform unified communications system. A file upload vulnerability exists in the communication system of Beijing Zhongwang Network Technology Co., Ltd, which can be exploited by an attacker to obtain server control privileges...

SQL Injection Vulnerability in the Website of Beijing Depth Space Decoration Engineering Co.

Beijing Depth Space Decoration Group, founded in 2003, is a member unit of China Building Decoration Association. The website of the branch of Beijing Depth Space Decoration Engineering Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive...

Arbitrary File Read Vulnerability in Jeewx-Boot Free WeChat Butler Platform of Beijing National Torch Information Technology Co.

JeewxBoot is a free JAVA WeChat Butler platform that supports WeChat public numbers, small programs, WeChat third-party platforms, sweepstakes and more. Beijing Guo Torch Information Technology Co., Ltd Jeewx-Boot Free WeChat Butler Platform has an arbitrary file read vulnerability that can be...

Input Validation Vulnerability in CenturyStar Configuration Software

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Weak Password Vulnerability in UCM Collaborative Communication Platform of Beijing Zhongchuang Vision Technology Co.

UCM Collaborative Communication Platform is a SIP communication control hardware device, which can realize traditional video conference system terminal registration, multi-party conference MCU, device management, firewall traversal and so on. There is a weak password vulnerability in the UCM...

Command Execution Vulnerability in UCM Collaborative Communication Platform of Beijing Zhongchuang Vision Technology Co.

UCM Collaborative Communication Platform is a SIP communication control hardware device, which can realize traditional video conference system terminal registration, multi-party conference MCU, device management, firewall traversal and so on. There is a command execution vulnerability in the UCM...

Cross site scripting

A cross-site scripting XSS vulnerability in Beijing Liangjing Zhicheng Technology Co., Ltd ljcmsshop version 1.14 allows remote attackers to inject arbitrary web script or HTML via user.php by registering an account directly in the user center, and then adding the payload to the delivery address...

CVE-2020-22723

A cross-site scripting XSS vulnerability in Beijing Liangjing Zhicheng Technology Co., Ltd ljcmsshop version 1.14 allows remote attackers to inject arbitrary web script or HTML via user.php by registering an account directly in the user center, and then adding the payload to the delivery address...

CVE-2020-22723

CVE-2020-22723 affects Beijing Liangjing Zhicheng Technology Co., Ltd ljcmsshop, version 1.14. The vulnerability is a cross-site scripting (XSS) flaw that can be triggered via user.php when a user registers in the user center and adds a payload to the delivery address. The NVD entry reports CVSS ...

Command Execution Vulnerability in Curtains of Beijing KunDou Technology Co.

Curtain is a mind mapping software for computers. A command execution vulnerability exists in Beijing Kundu Technology Co Ltd Curtains. An attacker can exploit this vulnerability to gain server privileges...

Beijing Yunmeng Network Technology Co., Ltd. website building system has logical flaws and vulnerabilities

Beijing Yunmeng Intelligent Technology Co., Ltd hereinafter referred to as Yunmeng is a well-known provider of cloud computing software applications in China. There is a logic flaw vulnerability in the website building system of Beijing Yunmeng Network Technology Co. Attackers can utilize the...

SQL Injection Vulnerability in the Website Building System of Beijing Zhongcheng Kexin Technology Development Co.

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the website building system of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain sensitive...