23 matches found
SQL Injection Vulnerability in Online Conference System of Beijing Gobit Technology Co.
Online meeting system Beijing Gobitech Technology Co. A SQL injection vulnerability exists in the Online Conference System of Beijing Gobitech Technology Co. The parameter deptid is injected, which can be used by an attacker to launch an attack and obtain sensitive information from the database...
Unified conference system universal password vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: the Unified conference systemthe Unified Council Systemsthere is a serious administrator authentication bypass vulnerability, if not fix the vulnerability, an attacker using a simple or=or you can break through the background verification of the limit, the consequences...
Open Conference System < 1.1.6 Multiple Script fullpath Parameter Remote File Inclusion
The remote host is using Open Conference System, a PHP application for managing scholarly conference websites. The version of Open Conference System installed on the remote host fails to sanitize input to the 'fullpath' parameter before using it to include PHP code in the 'include/theme.inc.php'...