46 matches found
Soars-government system /TSPB/web/xzzx/xzzx. jsp parameter parentid SQL injection vulnerability
No description provided by source...
农友政务系统 /ckq/jwhkzjdlist.aspx文件CountryName参数SQL注入漏洞
No description provided by source...
SQL Injection Vulnerability in InfoId Parameter of Wave's Government e-Government System
The government e-government system is the social security information system government agencies and institutions information management system civil service management subsystem. Wave's government e-government system InfoId parameter SQL injection vulnerability, attackers can use the vulnerabili...
南京擎天政务系统 /webpages/theme_service_list_page.aspx POST型sql注入
No description provided by source...
Struts2 Command Execution Vulnerability in Government Network System
The Government Web System is a set of software designed to provide website building services for the government. A struts2 command-and-execute vulnerability exists in the GovWeb system, which can be exploited by an attacker to gain control of the website...
Multiple vulnerabilities in the Nepalese national government's common website building system
Nepal National Government Universal System NGUS is a website builder system. There are multiple vulnerabilities in the NGN Universal System that can be exploited by an attacker to obtain sensitive information from the database, upload a webshell, and gain access to the server...
Unauthorized Vulnerability in Guotai Newpoint Software E-Government System
Jiangsu Guotai New Point Software Co., Ltd. is as a total solution provider of information technology, focusing on the fields of intelligent government, intelligent transaction, intelligent city park, construction industry and so on. An unauthorized vulnerability exists in the e-government system...
SQL Injection Vulnerability in 'infoid' Parameter of Wave Software Government System
Wave software government system is an industry informatization application system built on the basis of cloud computing and big data. A SQL injection vulnerability exists in the parameters of the WaveSoft Government System. The lack of filtering of the 'infoid' parameter allows an attacker to...
Chengdu Xichen Software Co., Ltd. e-Government System Cross-site Scripting Vulnerability
E-government system is a common government office system developed by Chengdu Xichen Software Co. A cross-site scripting vulnerability exists in the e-Government system of Chengdu Xichen Software Co., Ltd, which allows attackers to exploit this vulnerability to implant cross-site code, and when...
SQL Injection Vulnerability in Guangzhou Shengqi Computer E-Government System
Shengqi is China's first professional high-tech enterprise integrating research, development and technical service of intelligent management system for state-owned assets. SQL injection vulnerability exists in Centec's e-government system. By comprehensively exploiting the vulnerability, an...
浪潮某政府系统通用SQL注入24处打包
简要描述： ... 详细说明： 某政府系统通用SQL注入24处打包。 案例：（23处GET注入+1处POST注入） 23处GET注入： http://www.whaac.gov.cn:8080/BusinessRegistration/BRProjectList.aspx?page=1&procode= http://www.cfdonline.org.cn/OutPortalCFD//BusinessRegistration/BRProjectList.aspx?page=1&procode=...
SQL Injection Vulnerability in the id Parameter of a Government System Developed by Beijing Xiangyu Leader Software Co.
Ltd. is a high-tech enterprise dedicated to the research and development of office software for e-government applications and market development. A SQL injection vulnerability exists in the id parameter of the government system developed by Beijing Xiangyu Leader Software Co., Ltd. which allows...
某政府系统通用SQL盲注#(影响大量政府)
简要描述： RT 详细说明： 官网:http://www.jit.com.cn/ http://218.27.140.5/zwdtSjgl/Directory/lastDirListiframe.jsp?departmentid=402880eb3430f524013430f693450002&departmentname=各部门、各直属机构&departmentType=-1...
某政府系统一处SQL注入
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item5.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item5.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item5.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item5.aspx?id=1...
某政府系统一处SQL注入
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item4.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item4.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item4.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item4.aspx?id=1...
某政府系统#注入漏洞一枚
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下: /symItemManage/ItemForth.aspx?id=11 http://222.135.76.147:8200/symItemManage/ItemForth.aspx?id=11 http://222.135.127.190:7200/symItemManage/ItemForth.aspx?id=11 http://221.2.149.47:8200/symItemManage/ItemForth.aspx?id=11...
某政府系统一处SQL注入
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 和这个漏洞 WooYun: 某政府系统一处SQL注入 是同一文件的但是不是同一目录下的注入，不知道算不算重复啊 案例如下： http://61.133.119.187:8091/symItemView/ItemFifth.aspx?id=1 http://222.135.76.147:8200/symItemView/ItemFifth.aspx?id=1 http://222.135.127.190:7200/symItemView/ItemFifth.aspx?id=1...
某政府系统两处注入打包
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 和这个漏洞 WooYun: 某政府系统三处注入打包 是同一文件的但是不是同一目录下的注入，不知道算不算重复啊 第一处： http://61.133.119.187:8091/symItemView/ItemSixth.aspx?id=1 http://222.135.76.147:8200/symItemView/ItemSixth.aspx?id=1 http://222.135.127.190:7200/symItemView/ItemSixth.aspx?id=1...
某政府系统一处SQL注入
简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/symItemView/ItemFourth.aspx?id=1 http://222.135.76.147:8200/symItemView/ItemFourth.aspx?id=1 http://222.135.127.190:7200/symItemView/ItemFourth.aspx?id=1 http://221.2.149.47:8200/symItemView/ItemFourth.aspx?id=1...
某gov行政服务系统Oracle数据库搜索型POST注入
简要描述： RT 详细说明： 排除该套系统其它注入点： WooYun: 某大型政府服务系统Oracle注入使用量大 WooYun: 某Gov行政中心系统Oracle注入漏洞使用量大 此处是一个POST注入，存在注入地方：spjggsQuery.do?method=busiinfoquery POST参数id存在注入 wooyun还没人提交，抢先。。如图： 按照通用程序标准（十个以上案例+演示），部分案例如下： http://119.1.108.246/spjggsQuery.do?method=busiinfoquery...