PYSEC-2020-244

OMERO.web before 5.6.3 optionally allows sensitive data elements e.g., a session key to be passed as URL query parameters. If an attacker tricks a user into clicking a malicious link in OMERO.web, the information in the query parameters may be exposed in the Referer header seen by the target...

Path traversal

OMERO.web before 5.6.3 optionally allows sensitive data elements e.g., a session key to be passed as URL query parameters. If an attacker tricks a user into clicking a malicious link in OMERO.web, the information in the query parameters may be exposed in the Referer header seen by the target...

SQL Injection Vulnerability in the Website Building System of Shenzhen ShuoWin Interactive Information Technology Co.

Shenzhen ShuoWin Interactive Information Technology Co., Ltd. was founded in October 2006, is a web2.0 application website and launched SNS business services. There is a SQL injection vulnerability in the website system of Shenzhen ShuoWin Interactive Information Technology Co., Ltd, which can be...

CVE-2020-12003

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 an...

Code injection

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 an...

CVE-2020-12001

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 an...

ShopsN open source mall system sa*** there are SQL injection vulnerabilities

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system sa there is a SQL injection...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-44109)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Kaiping Lianke Network Technology Co. Ltd (CNVD-2020-38976)

Kaiping Lianke Network Technology Co., Ltd. is a company that mainly specializes in website construction, website promotion, speed software, sanitary ware ERP management software, and micro letter marketing. Kaiping City, Lianke Network Technology Co., Ltd. building system there are SQL injection...

SQL Injection Vulnerability in Jeesite of Jinan Zhuoyuan Software Co.

JeeSite is an enterprise information technology development infrastructure platform , Java enterprise applications open source framework. Jinan Zhuoyuan Software Co., Ltd. Jeesite SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Rockwell Automation FactoryTalk Linx Software (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: FactoryTalk Linx Software Vulnerabilities: Improper Input Validation, Path Traversal, Unrestricted Upload of File with Dangerous Type 2. RISK EVALUATION Successful...

Arbitrary File Download Vulnerability in Website Building System of Beijing Zhongjin Yunchuang Software Co.

Ltd. is a company that has the ability to implement and develop traditional ERP, as well as experience in mobile Internet applications. There is an arbitrary file download vulnerability in the website building system of Beijing Zhongjin Yunchuang Software Co., Ltd, which can be exploited by...

IBM WebSphere Application Server Information Disclosure Vulnerability (CNVD-2020-32641)

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. An information disclosure vulnerability exists in IBM WebSphere...

SQL injection vulnerability in pho*** page of website building system of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. Ltd. station building system pho page exists SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in the Pro*** Page of the Website Building System of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. Ltd. station building system pro page there is a SQL injection vulnerability, the attacker can use the vulnerability to obtain database...

PHPCMS suffers from SQL injection vulnerability

PHPCMS uses OOP object-oriented approach to the independent development of the framework. The framework is easy to expand, stable and with ultra-powerful load capacity, can fully meet the government agencies, educational institutions, institutions, commercial enterprises, individual webmasters...

SQL Injection Vulnerability in Pangu Website System of Shenyang Pangu Network Technology Co.

Shenyang Pangu Network Technology Co., Ltd. is a Baidu business as the core, for the local business to provide network marketing services of the Internet + group of companies. Shenyang Pangu Network Technology Co., Ltd. Pangu website system SQL injection vulnerability, attackers can use the...

CVE-2020-4187

IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174805...

Google Android Framework Information Disclosure Vulnerability (CNVD-2020-31527)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Framework component of Google Android 10. An attacker can exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in University Worry-Free Online Course Selection System

School Worry-Free Online Course Selection System is designed to solve the problem of cumbersome work brought about by students' independent course selection by selecting courses online and completing personal course selection information, replacing the manual operation with paper. The system is...