PT-2022-11201 · Tencent · Wechat

Name of the Vulnerable Software and Affected Versions: WeChat versions 8.0.10 Description: A mini program in the WeChat application can obtain sensitive information from a user's address book via wx.searchContacts. This issue allows unauthorized access to user data. Recommendations: For WeChat...

CVE-2021-24303

The CVE-2021-24303 entry concerns the WordPress plugin “JiangQie Official Website Mini Program” (before v1.1.1). The vulnerability arises because the id GET parameter is not escaped/validated before being used in SQL statements, enabling SQL injection. Impact is described as high (per CVE data) w...

WordPress JiangQie Official Website Mini Program plugin <= 1.1.0 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by ja9er in WordPress JiangQie Official Website Mini Program plugin versions = 1.1.0. Solution Update the WordPress JiangQie Official Website Mini Program plugin to the latest available version at least 1.1.1...

Anhui Weitong Technology Co., Ltd. Weitong open source mall management platform there are XML entity injection vulnerabilities

Microteam Mall is an open source WeChat small program mall front and back end open source : uniapp + Java, with seconds , coupons , multi-merchant , live selling , distribution and other functions , can be used to quickly build a WeChat small program mall . Anhui Weitong Technology Co., Ltd...

Chengdu Crazy Horse Crazy Horse Technology Co., Ltd Crazy Horse Fitness WeChat mini-program has a logic flaw vulnerability

Chengdu Crazy Horse Crazy Horse Technology Co. was founded on December 27, 2017 . The company's business scope includes: software research and development, technical development of network equipment, technical consulting, technical services, technology transfer and so on. Chengdu Crazy Horse Craz...

File Upload Vulnerability in LaiKe Full Scene Ecommerce System

LaiKe full-scene e-commerce system is a WeChat small program e-commerce platform front and back end open source PHP, including distribution, group, lottery, red packets and other functions , the entire system architecture is very simple , suitable for small teams or individual developers secondar...