coloradospringsproperty.management Cross Site Scripting vulnerability OBB-2531034

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pacificrimpropertymanagement.com Cross Site Scripting vulnerability OBB-2385447

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bottomline-propertymanagement.com Cross Site Scripting vulnerability OBB-2349745

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SQL Injection Vulnerability in Chengdu Zero Takeoff Network Customer Management CRM System (CNVD-2021-50629)

Customer management CRM system is zero takeoff network development, based on the GPLv3 protocol release, for small and medium-sized management activities, to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed...

SQL Injection Vulnerability in Chengdu Zero Takeoff Network Customer Management CRM System

Customer management CRM system is zero takeoff network development, based on the GPLv3 protocol release, for small and medium-sized management activities, to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed...

Directory Traversal Vulnerability in Lotte Property Operations Management System

Lotte Property Management System is a property management system. A directory traversal vulnerability exists in Lotte Property Management System, which can be exploited by attackers to obtain sensitive information...

CVE-2021-22856

The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege...

CVE-2021-22856

The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege...

Sql injection

The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege...

CVE-2021-22857 ChanGate EnterPrise Co., Ltd property management system - Directory Traversal

The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily...

CVE-2021-22858 ChanGate EnterPrise Co., Ltd property management system - Broken Authentication

Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions...

CVE-2021-22856

The CVE-2021-22856 entry is linked to the CGE property management system with SQL injection vulnerabilities. The root cause is unsafely handling parameters in cookies, allowing remote attackers to inject SQL commands and read data from the database without privileges. The connected sources (NVD e...

CVE-2021-22856

The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege...

Command Execution Vulnerability in HC Community Property Management System of Hefei Six Out Network Technology Co.

HC neighborhood property management system is initiated by the java110 team in April 2017 front and back end separation , distributed architecture open source projects. Hefei Six Out Network Technology Co. HC community property management system has a command execution vulnerability that can be...

Bohan Weiye (Beijing) Technology Co., Ltd. community arterial property management integrated management and control cloud service platform has logic flaws and vulnerabilities

Bohanweiye Beijing Technology Co., Ltd. is a comprehensive solution provider of mobile Internet of Things IoT. A logic flaw exists in the Community Artery Property Management Integrated Control Cloud Service Platform of Bohan Weiye Beijing Technology Co. An attacker can use the vulnerability to l...

Reside Property Management 3.0 - (profile) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Reside Property Management 3.0 - 'profile' SQL Injection Google Dork: "Copyright 2020 Reside Property Management" Exploit Author: Ultra Security Team Ashkan Moghaddas , AmirMohammad Safari Team Members: Behzad Khalifeh , Milad...

Reside Property Management 3.0 SQL Injection

Exploit Title: Reside Property Management 3.0 - 'profile' SQL Injection Date: 2020-06-28 Google Dork: "Copyright 2020 Reside Property Management" Exploit Author: Ultra Security Team Ashkan Moghaddas , AmirMohammad Safari Team Members: Behzad Khalifeh , Milad Ranjbar Vendor Homepage:...

Reside Property Management 3.0 - 'profile' SQL Injection

Exploit Title: Reside Property Management 3.0 - 'profile' SQL Injection Date: 2020-06-28 Google Dork: "Copyright 2020 Reside Property Management" Exploit Author: Ultra Security Team Ashkan Moghaddas , AmirMohammad Safari Team Members: Behzad Khalifeh , Milad Ranjbar Vendor Homepage:...

HotelDruid 2.3 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications =========================================================================================== Exploit Title: Hoteldruid 2.3 - 'nsextt' XSS Injection CVE: CVE-2019-8937 Exploit Author: Mehmet EMIROGLU Vendor Homepage:...

HotelDruid 2.3 Cross Site Scripting

=========================================================================================== Exploit Title: Hoteldruid 2.3 - 'nsextt' XSS Injection CVE: CVE-2019-8937 Date: 18-02-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://sourceforge.net/projects/hoteldruid/ Software Link:...