CVE-2023-2522

CVE-2023-2522 affects Chengdu VEC40G 3.0 (Network Detection). The vulnerability lies in the /send_order.cgi?parameter=access_detect endpoint, where manipulating the COUNT argument with input like 3 | netstat -an causes os command injection. Exploitation is remote and has been publicly disclosed. ...

PT-2023-19991 · Unknown · Chengdu Vec40G

Name of the Vulnerable Software and Affected Versions: Chengdu VEC40G version 3.0 Description: A critical issue affects an unknown functionality of the file /send order.cgi?parameter=access detect in the Network Detection component. The manipulation of the COUNT argument with the input 3 | netsta...

SQL Injection Vulnerability in the ERP System of Chengdu Pan-Pro Software Development Co.

Chengdu Pan-Pro Software Development Co., Ltd, business scope contains material management system, construction cost management software, contract management system, project progress management system and so on. The ERP system of Chengdu Pan-Pro Software Development Co., Ltd. suffers from a SQL...

SQL Injection Vulnerability in Chengdu Zero Takeoff Network Customer Management CRM System (CNVD-2021-50629)

Customer management CRM system is zero takeoff network development, based on the GPLv3 protocol release, for small and medium-sized management activities, to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed...

SQL Injection Vulnerability in ThinkSNS of Chengdu Zhiyi Creative Technology Co. Ltd (CNVD-2021-49159)

ThinkSNS TS for short, is the open source microblogging, social networking system under the Wise Software, including microblogging, forums, information, channels, shopping centers, activities, location, find people, live broadcasts, Q&A and a series of features. ThinkSNS of Chengdu Zhiyi Creative...

SQL Injection Vulnerability in ThinkSNS of Chengdu Zhiyi Chuangxue Technology Co.

ThinkSNS TS for short, is the open source microblogging, social networking system under the Wise Software, including microblogging, forums, information, channels, shopping centers, activities, location, find people, live broadcasts, Q&A and a series of features. ThinkSNS has a SQL injection...

SQL Injection Vulnerability in Chengdu Zero Takeoff Network Customer Management CRM System

Customer management CRM system is zero takeoff network development, based on the GPLv3 protocol release, for small and medium-sized management activities, to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed...

Weak Password Vulnerability in Bee.com Internet's Enterprise Flow Control Cloud Router

Founded in October 2016, Chengdu ZhiBee.com Technology Limited Liability Company is an emerging high-tech company integrating research and development, production and sales. A weak password vulnerability exists in the BeeNet Interconnect Enterprise Flow Control Cloud Router , which can be exploit...

Arbitrary File Read Vulnerability in Flash Flood Monitoring and Early Warning System of Chengdu Wanjiang Gangli Technology Co.

Founded in 2007, Chengdu Wanjiang Gangli Technology Co., Ltd. is positioned as a full chain service provider of water technology under the framework of artificial intelligence. There is an arbitrary file read vulnerability in the flash flood monitoring and warning system of Chengdu Wanjiang Gangl...

Flying FishStar Enterprise Intelligent Internet Behavior Management System suffers from information leakage vulnerability (CNVD-2021-41503)

Chengdu Flying Fish Star Technology Co., Ltd. is a company dedicated to providing intelligent and easy-to-use network communication products and services, continuously improving the quality of network usage through innovative technologies, and cooperating with users to create an intelligent and...

File Upload Vulnerability in Blue Ocean Premier Billing Management System

Chengdu Starry Blue Ocean Network Technology Co., Ltd. is a company whose business scope includes the sales of: computers and accessories, electronic products, communication products excluding radio transmitting equipment and so on. A file upload vulnerability exists in the Blue Ocean Excellence...

Blue Ocean Premier billing management system has information leakage vulnerability

Chengdu Starry Blue Ocean Network Technology Co., Ltd. is a professional manufacturer and supplier of routers, cell access gateways, authentication billing servers. An information leakage vulnerability exists in the Blue Ocean Premier Billing Management System. An attacker can exploit this...

Chengdu ZhiBee.com Technology Co., Ltd. enterprise-level flow control cloud router with logic flaw vulnerability

Founded in October 2016, Chengdu ZhiBee.com Technology Limited Liability Company is an emerging high-tech company integrating research and development, production and sales. A logic flaw vulnerability exists in Chengdu ZhiBee.com Technology LLC's enterprise-grade flow control cloud router, which...

Logic Flaw Vulnerability in IPTV Gateway Server at Chengdu Dexin Digital Technology Co.

Chengdu Dexin Digital Technology Co., Ltd. is a national high-tech enterprise integrating science, industry and trade. A logic flaw exists in the IPTV gateway server of Chengdu Dexin Digital Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information...

Chengdu New Line Plus Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-39122)

Chengdu New Line Plus Technology Co., Ltd. was founded in 2010, specializing in providing website construction and Internet marketing services for enterprises and institutions in Chengdu. There is a SQL injection vulnerability in Chengdu New Line Plus Technology Co., Ltd's website building system...

SQL Injection Vulnerability in Blue Ocean Excellence Billing Management System of Chengdu Starry Blue Ocean Network Technology Co.

Blue Ocean Premier Billing Management System is a system that realizes the unfoundation of network operation. The Blue Ocean Excellence Billing Management System of Chengdu Starry Blue Ocean Network Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attacke...

Catalog Traversal Vulnerability in Flash Flood Monitoring and Early Warning System of Chengdu Wanjiang Gangli Technology Co.

Founded in 2007, Chengdu Wanjiang Gangli Technology Co., Ltd. is positioned as a full chain service provider of water technology under the framework of artificial intelligence. There is a directory traversal vulnerability in the flash flood monitoring and early warning system of Chengdu Wanjiang...

Privilege Bypass Vulnerability in Flying Fish Star Enterprise Intelligent Internet Behavior Management System

Chengdu Flying Fish Star Technology Co., Ltd. is a company dedicated to providing intelligent and easy-to-use network communication products and services, continuously improving the quality of network usage through innovative technologies, and cooperating with users to create an intelligent and...

Information Leakage Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.

Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. An information leakage vulnerability exists in the employment information management syste...

SQL Injection Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.

Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. A SQL injection vulnerability exists in the Employment Information Management System of...