SQL Injection Vulnerability in B2B2C Multi-User Mall System (CNVD-2020-26551)

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. There is a SQL injection vulnerability in the B2B2C Multi-User Mall system, which can be exploited by attackers to obtain sensitive information from the databa...

SQL Injection Vulnerability in ECShop Website of Shanghai ShangPai Network Technology Co.

Founded in 2002, Shanghai Shangpai Network Technology Co., Ltd. is a professional e-commerce system and service provider in China. A SQL injection vulnerability exists in the ECShop website of Shanghai ShangPai Network Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Shanghai Zhenghang Electronic Technology Co., Ltd. 7-inch touch screen programming software has memory corruption vulnerability

Ltd. is a high-tech enterprise dedicated to product design and development, production, sales and service in the field of industrial control. Ltd. 7-inch touch screen programming software memory corruption vulnerability, attackers can use the vulnerability to construct a deformed hmp file can lea...

Shanghai ShangPai Network Technology Co., Ltd. ECShop suffers from a flawed payment logic vulnerability

ECShop is a B2C classic open source mall system. Shanghai ShangPai Network Technology Co., Ltd ECShop there is a payment logic flaw vulnerability, attackers can use the vulnerability to modify the amount of goods...

Shanghai Danfan Network Technology Co., Ltd. builds website system with SQL injection vulnerability (CNVD-2020-20209)

Shanghai Danfan Network Technology Co., Ltd. is for the chemical industry to provide B2B e-commerce platform of professional website. Shanghai Danfan network science and technology limited company builds the station system exists the SQL injection loophole, the attacker may utilize the loophole...

SQL Injection Vulnerability in the Website Building System of Shanghai Cai Sheng Information Technology Co.

Shanghai Cai Sheng Information Technology Co., Ltd. is a company that focuses on enterprise website construction. Shanghai CaiSheng Information Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from...

Information leakage vulnerability with the application of the Citizen Cloud App

With the application of the Citizen Cloud APP is a life service platform designed for Shanghai citizens. There is an information leakage vulnerability in the APP, which can be exploited by attackers to obtain the user's corresponding ID card information...

Information Disclosure Vulnerability in IEXplorer at Delta Electronics Enterprise Management (Shanghai) Co.

IEXplorer is an industrial Ethernet tool software that provides automatic searching of Delta's industrial Ethernet products, instant monitoring of device connection status, quick IP address setting and software upgrade, etc. It is applicable to products including DVS series, DVW series, IFD9506,...

Unauthorized Access Vulnerability in IEXplorer at Delta Electronics Enterprise Management (Shanghai) Co.

IEXplorer is an industrial Ethernet utility software that provides automatic searching of Delta's industrial Ethernet products, instant monitoring of device connection status, fast IP address setting and software upgrades for products such as DVS series, DVW series, IFD9506, IFD9507, RTU-EN01,...

Shanghai Zhaoliang Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Shanghai Zhaoran Network Technology Co., Ltd. is an IT company specializing in website construction and promotion, software development, large-scale e-commerce platform construction and operation. Shanghai Zhaoran Network Technology Co., Ltd. website construction system SQL injection vulnerabilit...

File Upload Vulnerability in Record Management System V3.1 of Shanghai Chuangqi World Technology Co.

Trunkey ICP/IP address information filing management system is a set of ISP service provider enterprise side filing management system. A file upload vulnerability exists in the filing management system V3.1 of Shanghai Trunkey Technology Co...

SQL Injection Vulnerability in Website Building System of Shanghai Longmind Digital Technology Co.

Ltd. is a professional website construction application technology and internet marketing service provider in Shanghai. A SQL injection vulnerability exists in Lonmin's website building system, which can be exploited by attackers to obtain sensitive information from the database...

Arbitrary File Download Vulnerability in Website Building System of Shanghai Zhongke Network Information Technology Co.

Ltd. is engaged in the information technology field of Internet network services and network business application research including e-commerce, commercial website planning and web design, etc.. Shanghai Zhongke Network Information Technology Co., Ltd. station building system exists arbitrary fil...

SQL Injection Vulnerability in Shanghai Silverfox Information Technology Co.

Shanghai Silver Fox Information Technology Co., Ltd Silver Fox Power is a high-tech company dedicated to enterprise information technology services. Shanghai Silverfox Information Technology Co., Ltd. station building system has a generic SQL injection vulnerability, attackers can use the...

SQL Injection Vulnerability in pr***.asp Page of Shanghai Silverfox Information Technology Co.

Shanghai Silver Fox Information Technology Co., Ltd Silver Fox Power is a high-tech company dedicated to enterprise information technology services. Shanghai Silverfox Information Technology Co., Ltd. building system pr.asp page SQL injection vulnerability exists. Attackers can use the...

SQL Injection Vulnerability in Shanghai Yihao Information Technology Co.

Shanghai Yihao Information Technology Co., Ltd. is mainly engaged in the field of computer information technology, technology development, technology consulting and other businesses. Shanghai Yihao Information Technology Co., Ltd. website building system has a SQL injection vulnerability, which c...

2345 Website Navigation Desktop Edition is vulnerable to dll hijacking.

2345 Website Navigation Desktop Edition is a desktop navigation and management tool promoted by Shanghai 2-3-4-5 Network Technology Co. It has the functions of one-click quick access to 2345, quick creation of mini-notes, desktop calendar and so on. There is a dll hijacking vulnerability in...

2345 Security Guard suffers from dll hijacking vulnerability

2345 Security Guard is the security software of Shanghai 2-3-4-5 Network Technology Co. 2345 Security Guard has a dll hijacking vulnerability, which can be exploited by attackers to load malicious dlls and execute malicious code...

SQL Injection Vulnerability in B2B2C Multi-User Mall System of Shanghai Shangchuang Network Technology Co.

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. There is a SQL injection vulnerability in the B2B2C Multi-User Mall system of Shanghai Shangchuang Networks Technology Co...

SQL Injection Vulnerability in B2B2C Multi-User Mall System of Shanghai Shangchuang Network Technology Co.

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. There is a SQL injection vulnerability in the B2B2C Multi-User Mall system of Shanghai Shangchuang Networks Technology Co...