Multiple Vulnerabilities in JAVAPMS Portal Management System of Nanchang Zhengneng Information Technology Co.

JAVAPMS portal management system to SpringMVC + Spring + Hibernate + Freemarker + Html5 + jQuery for the technical core architecture , for individual webmasters , commercial enterprises , government agencies , educational institutions and other various units of the organization's information port...

SQL Injection Vulnerability in Standard Pepsi Al***.ashx Page of RunShen Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a high-tech company specializing in software development and information services. A SQL injection vulnerability exists in the Standard Pepsi Al.ashx page of R&S Information Technology Shanghai Co. An attacker can exploit the vulnerability to obtai...

SQL Injection Vulnerability in Standard Pepsi BH***.ashx Page of RunShen Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a high-tech company specializing in software development and information services. A SQL injection vulnerability exists in the Standard Pepsi BH.ashx page of R&S Information Technology Shanghai Co. An attacker can exploit the vulnerability to obtai...

SQL Injection Vulnerability in Shanghai TengYan Information Technology Co.

The main business of Shanghai TengYan Information Technology Co., Ltd. is to provide customers with IT solutions and IT outsourcing services. Shanghai TengYan Information Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited by attackers to...

SQL Injection Vulnerability in Jeecg-Boot v2.1.4 at Beijing Guo Torch Information Technology Co.

Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Beijing Guo Torch Information Technology Co. Jeecg-Boot v2.1.4 suffers from a SQL injection vulnerability, which can...

Vulnerabilities in the Employment Information Network System of Beijing Rongzhi Chuangxiang Information Technology Co.

Beijing Rongzhi Chuangxiang Information Technology Co., Ltd, is a company engaged in Internet software development. An override access vulnerability exists in the Employment Information Network system, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Website Building System of Wuhan Bajie Group Information Technology Co.

Wuhan Bajie Group Information Technology Co., Ltd. is a company that provides integrated solutions of development, operation, training and promotion for enterprises. There is a SQL injection vulnerability in the website building system of Wuhan Bajie Group Information Technology Co., Ltd, which c...

JXCMS suffers from SQL injection vulnerability

Jingxun CMS is an efficient and safe website construction and management system independently developed by Taizhou Jingxun Information Technology Co. JXCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain database information...

Cisco Patches Critical Bug in License Management Tool

Cisco Systems is warning of a critical bug in two of its license management tools that could allow an unauthenticated remote attacker to execute arbitrary queries. A successful attack could allow for an attacker to modify and delete random data in Cisco product lifecycle management applications...

Universal Password Login Vulnerability in All-Media Content Management and Business Support Platform of Beijing Jingwei Zhongtian Information Technology Co.

Beijing Jingwei Zhongtian Information Technology Co., Ltd. is a high-tech enterprise specializing in software development and services related to network audio-visual content management and applications. A universal password login vulnerability exists in the all-media content management and...

Digital Campus System Arbitrary File Upload Vulnerability at Shanghai Dingchuang Information Technology Co.

Ltd. is based on China's education informatization business, is committed to the development of research and development of convenient and easy to use campus management software. The vulnerability in the upload of arbitrary files in the Digital Campus System of Shanghai Dingtron Information...

某政府信息公开系统存在SQL注入

简要描述： RT 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用5个案例来测试。 注入链接是： /zwdtSjgl/infoIndex.jsp?channelCid= 案例： http://218.27.207.22/zwdtSjgl/infoIndex.jsp?channelCid=6 http://218.27.190.107:8080/zwdtSjgl/infoIndex.jsp?channelCid=9...