SQL Injection Vulnerability in zzcms 2019 Frontend

zzcms webmaster Merchants content management system, developed by the zzcms team, into the database optimization, content caching, AJAX and other technologies, so that the site's security, stability, load capacity to get a reliable guarantee. zzcms 2019 front-end SQL injection vulnerability,...

SQL injection vulnerability in zzcms 2019 frontend (CNVD-2019-37717)

zzcms webmaster Merchants content management system, developed by the zzcms team, into the database optimization, content caching, AJAX and other technologies, so that the site's security, stability, load capacity to get a reliable protection. Open source, independent functional modules, to...

SQL injection vulnerability in yiqicms frontend pr***.php file

Yiqi CMS yiqicms is a content management system CMS for marketing-oriented enterprise websites. A SQL injection vulnerability exists in the yiqicms front-end pr.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

File upload vulnerability in ThinkCMF frontend Ue***.cl***.php file

ThinkCMF is a Chinese content management framework based on PHP+MYSQL. A file upload vulnerability exists in the ThinkCMF frontend Ue.cl.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SQL injection vulnerability in yiqicms frontend pr***.php file

Yiqicms is a SEO-based marketing enterprise website system, using PHP+Mysql open source building system. There is a SQL injection vulnerability in the front pr.php file of yiqicms. Attackers can use this vulnerability to obtain sensitive information...

[SECURITY] Fedora 31 Update: irssi-1.2.2-1.fc31

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

Unauthorized Access Vulnerability in the Frontend of Nanjing Benan's Hidden Trouble Identification and Management Information System for Work Safety V2.3

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. Unauthorized access vulnerability exists in the front-end of Nanjing Benan's Hidden Accident Investigation and Management Information...

SQL Injection Vulnerability in the Frontend of Nanjing Benan Work Safety Accident Hidden Trouble Detection and Management Information System V2.3

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. SQL injection vulnerability exists in the front-end of Nanjing Benan's Hidden Accident Investigation and Management Information System...

File Upload Vulnerability in the Frontend of Nanjing Benan's Hidden Trouble Detection and Management Information System for Work Safety Accidents v2.3

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. There is a file upload vulnerability in the frontend of Nanjing Benan's Hidden Trouble Identification and Management Information System...

SQL Injection Vulnerability in the Frontend Web*** of Nanjing Benan's Hidden Trouble Detection and Management Information System for Work Safety Accidents v2.3

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. Nanjing Benan Safety Production Accident Hidden Trouble Detection and Management Information System v2.3 There exists a SQL injection...

SQL Injection Vulnerability in JC Retail Management Information System JC RMIS Frontend

Ongie is an innovative enterprise that provides fully integrated information system solutions and cloud services for retail enterprises with software development as its core, and is a full-service, integrated solution provider for the retail industry in China. A SQL injection vulnerability exists...

XSS Vulnerability in JC Retail Management Information System JC RMIS Frontend

Ongie is an innovative enterprise that provides fully integrated information system solutions and cloud services for retail enterprises with software development as its core, and is a full-service, integrated solution provider for the retail industry in China. JC Retail Management Information...

File Upload Vulnerability in Suntang Information Technology Laboratory Integrated Management System V6.0 Frontend

Suntang University Laboratory Resource Sharing Platform helps universities to establish a collaborative mechanism for resource sharing and laboratory opening, and provides a platform for resource allocation integration and teamwork for scientific research and innovation. A file upload vulnerabili...

Arbitrary Password Reset Vulnerability in the Frontend of Laboratory Integrated Management System of Hunan Suntang Information Technology Co.

Hunan Suntang Information Technology Co., Ltd. takes IT operation and maintenance integration platform and IT operation and maintenance service sharing platform as the core, and builds "Internet of Things" type IT integration operation and maintenance platform with the business system supplemente...

SQL Injection Vulnerability in the Frontend of Laboratory Integrated Management System of Hunan Santang Information Technology Co.

Hunan Suntang Information Technology Co., Ltd. takes IT operation and maintenance integration platform and IT operation and maintenance service sharing platform as the core, and builds "Internet of Things" type IT integration operation and maintenance platform with the business system supplemente...

CVE-2019-15953

An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not for API requests. This leads to vertica...

SQL Injection Vulnerability in YouDianCMS Frontend Cu***.cl***.php File

YouDianCMS is an enterprise website management system developed by Changsha YouDian Software Technology Co. A SQL injection vulnerability exists in the Cu.cl.php file in the frontend of YouDianCMS. An attacker can use the vulnerability to obtain sensitive information from the database...

XXE Injection Vulnerability in UsualToolCMS Frontend

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. An XXE injection vulnerability exists in the frontend of UsualToolCMS. An attacker can exploit the vulnerability to remotely read arbitrary files on the server...

SQL Injection Vulnerability in the Frontend of Tongda OA System of Beijing Tongda Science and Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

Unauthorized Access Vulnerability in the Frontend of Smartstone Online Training and Learning System of Shijiazhuang Lingstone Technology Co.

Smartstone Online Training and Learning System is an online learning platform that integrates both passive training and active learning modes and supports multi-level authorization management. There is an unauthorized access vulnerability in the frontend of Smartstone Online Training and Learning...