CVE-2022-45564

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

Sql injection

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

CVE-2022-45564

CVE-2022-45564 is a SQL injection vulnerability in znfit Home improvement ERP management system (versions V50_20220207, v42) that allows executing arbitrary SQL via the userCode parameter in the WeChat applet. The issue is critical (CVSS v3.1: 9.8, NETWORK, NONE required, no user interaction), af...

PT-2023-14707

Name of the Vulnerable Software and Affected Versions znfit Home improvement ERP management system versions V42 through V50 20220207 Description The issue allows attackers to execute arbitrary SQL commands via the userCode parameter to the WeChat applet, potentially leading to unauthorized data...

CVE-2022-45564

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

CVE-2022-45564

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

znfit Home improvement ERP management system SQL注入漏洞

znfit Home improvement ERP management system is a home ERP management system from znfit Shanghai, China. A security vulnerability exists in znfit Home improvement ERP management system version V5020220207, v42. An attacker exploited the vulnerability to execute arbitrary sql commands via the...

CVE-2022-45564: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

mitchellrepublic.com XSS vulnerability

Vulnerable URL: http://www.mitchellrepublic.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:24 GMT Vulnerability type:| XSS Vulnerability...

superiortelegram.com XSS vulnerability

Vulnerable URL: http://www.superiortelegram.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:28 GMT Vulnerability type:| XSS Vulnerability...

echopress.com XSS vulnerability

Vulnerable URL: http://www.echopress.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:23 GMT Vulnerability type:| XSS Vulnerability status:|...

farmingtonindependent.com XSS vulnerability

Vulnerable URL: http://www.farmingtonindependent.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:32 GMT Vulnerability type:| XSS Vulnerabilit...

parkrapidsenterprise.com XSS vulnerability

Vulnerable URL: http://www.parkrapidsenterprise.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:25 GMT Vulnerability type:| XSS Vulnerability...

bemidjipioneer.com XSS vulnerability

Vulnerable URL: http://www.bemidjipioneer.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:26 GMT Vulnerability type:| XSS Vulnerability...

wctrib.com XSS vulnerability

Vulnerable URL: http://www.wctrib.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:29 GMT Vulnerability type:| XSS Vulnerability status:|...

brainerddispatch.com XSS vulnerability

Vulnerable URL: http://www.brainerddispatch.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:27 GMT Vulnerability type:| XSS Vulnerability...

jamestownsun.com XSS vulnerability

Vulnerable URL: http://www.jamestownsun.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:23 GMT Vulnerability type:| XSS Vulnerability status:...

CVE-2014-7688

The Home Improvement aka com.whomeimprovementapp application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Home Improvement aka com.whomeimprovementapp application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7688

The CVE-2014-7688 entry concerns the Android app Home Improvement (package com.whomeimprovementapp) version 0.1, which does not verify X.509 certificates from SSL servers. This flaw allows a man-in-the-middle attacker to spoof servers and read sensitive information sent over TLS, due to missing c...