Improper access control

Computing For Good's Basic Laboratory Information System also known as C4G BLIS version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may alter several facets of a user account, including promoting any user to an administrator...

CVE-2019-5617

CVE-2019-5617 affects Computing For Good’s Basic Laboratory Information System (BLIS) v3.4 and earlier. The root cause is CWE-284, Improper Access Control, allowing an unauthenticated user to change the password of any administrator‑level user via a network attack. The CVSS‑3.1 vector (AV:N/AC:L/...

LabCollector 5.423 - SQL Injection

LabCollector 5.423 - SQL Injection Exploit Title: LabCollector Laboratory Information System 5.423 - Multiples SQL Injection Date: 09/09/2019 Software Links/Project: https://www.labcollector.com/clientarea/downloads.php Version: LabCollector Laboratory Information System 5.423 Exploit Author:...

Arbitrary File Deletion Vulnerability in RGCMS Fi***.php File

RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS Fi.php file exists in any file deletion vulnerability, an attacker can use this vulnerability to...

Information leakage vulnerability in the security management information system of the hotel industry

The Hotel Industry Security Management Information System HISMIS is a system that manages travelers' occupancy information. There is an information leakage vulnerability in the Hotel Security Management Information System. An attacker could exploit this vulnerability to obtain sensitive informati...

21 Industrial Real Estate Information Dissemination System suffers from xss vulnerability

21Industrial real estate network provides the latest factory, warehouse, land and other information. An xss vulnerability exists in the 21 Industrial Real Estate information dissemination system, which can be exploited by attackers to obtain user information...

CVE-2019-9134

Architectural Information System 1.0 and earlier versions have a Stack-based buffer overflow, allows remote attackers to execute arbitrary code...

CVE-2019-9134

Architectural Information System 1.0 and earlier versions have a Stack-based buffer overflow, allows remote attackers to execute arbitrary code...

CVE-2019-9134

CVE-2019-9134 affects Architectural Information System 1.0 and earlier versions. The vulnerability is a stack-based buffer overflow in the affected system that can allow remote attackers to execute arbitrary code. Exploitation details, affected component/file, and specific fixes are not provided ...

CVE-2019-9134

Architectural Information System 1.0 and earlier versions have a Stack-based buffer overflow, allows remote attackers to execute arbitrary code...

SQL Injection Vulnerability in PCCW Information System

PCCW Information System is a website building system developed by PCCW Information Limited. A SQL injection vulnerability exists in PCCW's website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Zhirui Elementary and Middle School Students' School Registration Information Management System

Zhirui Elementary and Middle School Students' School Registration Information Management System is an information system that collects students' basic information and reports it to the education administration department. SQL injection vulnerability exists in Zhirui Primary and Secondary School...

SQL Injection Vulnerability in 162100 Classified Information System us***_lo***.php File

162100 Classified Information System is a classified information website source code developed by php+MySQL. 162100 Classifieds Information System uslo.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in 162100 Classified Information System us***_ca***.php File

162100 Classified Information System is a classified information website source code developed by php+MySQL. 162100 Classifieds Information System usca.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Care2x 2.7 (HIS) Hospital Information System SQL Injection

Exploit Title: Care2x 2.7 HIS Hospital Information system - Multiples SQL Injection Date: 01/17/2019 Software Links/Project: https://github.com/care2x/care2x | http://www.care2x.org/ Version: Care2x 2.7 Exploit Author: Carlos Avila Category: webapps Tested on: Windows 8.1 / Ubuntu Linux Contact:...

What is a vulnerability and what is not?

It looks like a pretty simple question. I used it to started my MIPT lecture. But actually the answer is not so obvious. There are lots of formal definitions of a vulnerability. For example in NIST Glossary there are 17 different definitions. The most popular one used in 13 documents is:...

Care2x 2.7 (HIS) Hospital Information System - Multiple SQL Injection

Exploit Title: Care2x 2.7 HIS Hospital Information system - Multiples SQL Injection Date: 01/17/2019 Software Links/Project: https://github.com/care2x/care2x | http://www.care2x.org/ Version: Care2x 2.7 Exploit Author: Carlos Avila Category: webapps Tested on: Windows 8.1 / Ubuntu Linux Contact:...

Care2x 2.7 (HIS) Hospital Information System - Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Care2x 2.7 HIS Hospital Information system - Multiples SQL Injection Software Links/Project: https://github.com/care2x/care2x | http://www.care2x.org/ Version: Care2x 2.7 Exploit Author: Carlos Avila Category: webapps Tested on:...

Care2x 2.7 (HIS) Hospital Information System - Multiple SQL Injection

Care2x 2.7 HIS Hospital Information System - Multiple SQL Injection Exploit Title: Care2x 2.7 HIS Hospital Information system - Multiples SQL Injection Date: 01/17/2019 Software Links/Project: https://github.com/care2x/care2x | http://www.care2x.org/ Version: Care2x 2.7 Exploit Author: Carlos Avi...

Code Execution Vulnerability in CIM City Information Aggregation System

CIM is a city information aggregation CMS that is easy to operate, powerful, data standardized, flexible in settings, and can easily realize various website types and style interfaces. A code execution vulnerability exists in CIM City Information Aggregation System, which can be exploited by...