SQL Injection Vulnerability in the Frontend of DaQuanZhouAuto.com

It is an automobile network platform that provides Quanzhou automobile, Quanzhou automobile information, Quanzhou new car, Quanzhou used car and other services. SQL injection vulnerability exists in the front-end of DaQuanZhouAuto.com, the vulnerability stems from the failure to filter the pagenu...

Cookie Injection Vulnerability in the Frontend of DaQuanZhouAuto.com

It is an automobile network platform that provides Quanzhou automobile, Quanzhou automobile information, Quanzhou new car, Quanzhou used car and other services. Cookie injection vulnerability exists in the frontend of DaQuanzhouAuto.com, which can be exploited by attackers to obtain sensitive...

Arbitrary File Upload Vulnerability in the Frontend of Bizlaw eCom Information Management Software

Bizlawyer eTongue information management software is based on standardized management, the use of larger law firms needs to develop a comprehensive set of management software. There is an arbitrary file upload vulnerability in the front-end of Bizlawyer eTalk Information Management Software. An...

SQL Injection Vulnerability in Frontend of IM-Learning Intelligent Learning Management System of Guangyi East

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. A SQL injection vulnerability exists in the frontend of the IM-Learning Intelligent Learning Management System in Guangyi East. An attacker can exploit this...

PbootCMS V1.1.8-20180807 SQL Injection Vulnerability in Frontend

PbootCMS is an open source PHP enterprise web development and construction management system. PbootCMS V1.1.8-20180807 SQL injection vulnerability exists in the front-end , the vulnerability stems from the front-end does not limit the input information , the attacker can use the vulnerability to...

SQL Injection Vulnerability in the Frontend of Rongguang Information Ordering and Consumption System (荣光信息订取餐消费系统前台存在SQL注入漏洞)

Rongguang Information Ordering and Picking Up Food Consumption System is a multi-functional ordering system developed by Shenzhen Rongguang Information Co. SQL injection vulnerability exists in the frontend of Rongguang Information Ordering and Consumption System, which can be exploited by...

SQL Injection Vulnerability in Frontend of Sunny eDrive Reservation Management System

Jiangsu Gangcheng Automobile Transportation Group is a provincial group mainly engaged in road transportation and related industries. A SQL injection vulnerability exists in the frontend of the Sunny eDrive reservation management system. An attacker can exploit the vulnerability to obtain sensiti...

SQL Injection Vulnerability in the Frontend of Bureau Veritas Law Firm's Integrated Information Management Software

Bizhi law firms comprehensive information management software is Bizhi law firms for the use of the demand for a comprehensive set of specially developed management software. SQL injection vulnerability exists in the frontend of Bizlaw Firm Information Management Software. An attacker can use the...

PbootCMS V1.1.6-20180721 Code Execution Vulnerability in the Frontend

PbootCMS is an open source PHP enterprise web development and construction management system. A code execution vulnerability exists in the frontend of PbootCMS version V1.1.6-20180721, which can be exploited by an attacker to execute remote code...

NiuShop B2B2C Multi-merchant Mall System File Upload Vulnerability in Frontend

NiuShop B2B2C Multi-Merchant Mall System is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2B2C Multi-commerce Mall System has a file upload vulnerability in the frontend. An attacker can gain control of the...

Arbitrary File Read Vulnerability in weiphp 2.0 System Frontend

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. An arbitrary file read vulnerability exists in the weiphp 2.0 frontend. A remote attacker can exploit this vulnerability to read arbitrary files in the system...

Cscms v3.53.5 SQL Injection Vulnerability in Frontend

Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. Cscms v3.53.5 has a SQL injection vulnerability in the frontend. An attacker can exploit the vulnerability to obtain sensitive information from the database...

ShopsN v2.2.6 SQL Injection Vulnerability on Frontend Page

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. A SQL injection vulnerability exists in the front page of ShopsN v2.2.6 official...

SQL Injection Vulnerability in Frontend of gxlcmsqy System

GxlcmsQY system is a simple program tailored for business users. A SQL injection vulnerability exists in the frontend of the gxlcmsqy system. An attacker can exploit this vulnerability to obtain sensitive database information...

File upload vulnerability in kjcms frontend

kjcms is an internet and mobile internet based food ordering service reservation system. A file upload vulnerability exists in the kjcms frontend. The vulnerability is caused due to the upload file type and suffix can be controlled by the user, allowing an attacker to upload a webshell and gain...

DuomiCms x3.0 frontend duomiphp/ajax.php file has SQL injection vulnerability

DuomiCms is a video-on-demand system designed for film and television station owners. DuomiCms x3.0 frontend duomiphp/ajax.php file has SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

ask2 Q&A system front user.php file exists arbitrary user password change vulnerability

ask2 Q&A is an open source PHP Q&A program. There is an arbitrary user password change vulnerability in the ask2 Q&A System frontend user.php file. An attacker can exploit the vulnerability to directly modify the password of the administrator user...

SQL Injection Vulnerability in DuomiCms x3.0 Frontend

DuomiCms is a video-on-demand system designed for film and television station owners. SQL injection vulnerability exists in DuomiCms x3.0 frontend. An attacker can exploit the vulnerability to obtain sensitive database information...

Cross-Site Scripting Vulnerability in EasySNS V1.6 Frontend

ESPHP development framework based on the development of EasySNS minimalist community for the new database architecture and program structure.ESPHP is a self-developed set of PHP source code framework. EasySNS V1.6 in the program implementation of cross-site scripting vulnerabilities, attackers ca...

EduaskCMS v1.0.7 Cross-site Scripting Vulnerability in Frontend

EduaskCMS is a free and open source content management system based on ThinkPHP 5.0.14+layui2.2.5 framework. EduaskCMS v1.0.7 frontend has a cross-site scripting vulnerability in the program implementation, the vulnerability is due to the system fails to adequately filter the incoming parameters...