Document Containment Vulnerability in e-Government Platform of Shanghai Jofan Information Technology Co.

The eGovernment platform is an office system. A file inclusion vulnerability exists in the e-government platform of Shanghai Zhuo Fan Information Technology Co., Ltd, which allows attackers to obtain sensitive information such as configuration files by guessing the file directory...

Unauthorized Access Vulnerability in ICEFLOW VPN Router System of Shanghai Bingfeng Computer Network Technology Co.

Shanghai Bingfeng Computer Network Technology Co., Ltd. is a domestic VPN, Traffic Management, Behavior Management, Link Load Balancing, Next Generation Firewall equipment supplier and IT value solution provider. Bingfeng network reporter system is a set of data report management system...

SQL Injection Vulnerability in Shanghai Jiaoda Withub's Court Litigation Service Platform

Shanghai Jiaoda Withub Information Industry Co., Ltd. is mainly engaged in computer network and network security integration, application software development, building intelligence system integration, as well as agent sales of IT products. The court litigation service platform is one of the...

SQL injection vulnerability in the view_xz.aspx?a= parameter of Ticketmaster software at Shanghai Shengdai Information Technology Co.

Ticketmaster is a specialized ticket management system for airline ticket agents. A SQL injection vulnerability exists in the viewxz.aspx?a= parameter of the Ticketmaster Software of Shanghai Shengdai Information Technology Company Limited, which allows an attacker to exploit the vulnerability to...

Digital Campus System Arbitrary File Upload Vulnerability at Shanghai Dingchuang Information Technology Co.

Ltd. is based on China's education informatization business, is committed to the development of research and development of convenient and easy to use campus management software. The vulnerability in the upload of arbitrary files in the Digital Campus System of Shanghai Dingtron Information...

上海安脉教学系统存在注入漏洞

简要描述： RT 详细说明： SQL注入文件： /anmai/KYMamage/IntegrateSelect/OutlayPayoutSelectparticular.aspx SQL注入案例： http://218.78.241.80/anmai/KYMamage/IntegrateSelect/OutlayPayoutSelectparticular.aspx?id=1 http://jmzx.xmedu.cn:9999/anmai/KYMamage/IntegrateSelect/OutlayPayoutSelectparticular.aspx?id=1...

Beijing, Shanghai, including hundreds of hotel chains InnGate wireless router there are serious security vulnerabilities-vulnerability warning-the black bar safety net

Latest survey report shows that Beijing, Shanghai, including hundreds of Inn of the InnGate wireless router there are serious security vulnerabilities, an attacker would be able to get the hotel to monitor and document data, to the hotel customers spread computer viruses, and even can access the...

SQL Injection Vulnerability in Web Version of Ticket Management System of Shanghai Shengdai Information Technology Co.

Ltd. Ticket Management System Web Edition is a special ticket management system for airline ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending,...

SQL Injection Vulnerability in Ticketing Software of Shanghai Shengdai Information Technology Co.

Ltd. Ticketing software is a special ticket management system for airline ticketing agents, integrating online booking management, telephone recording screen, corporate travel management, order management, membership management, points management, SMS sending, staff management, report generation,...

Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities

No description provided by source. Document Title: =============== Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1235 Release Date: ============= 2014-03-28 Vulnerability Laboratory ID VL-ID:...

上海释锐教育 EEOA智慧校园系统命令执行（涉及全国26个省各种学校）

简要描述： 上海释锐教育 EEOA智慧校园系统命令执行（涉及全国26个省各种学校） 上海市： 普陀区教育局 | 徐汇区教育局 | 奉贤区教师进修学院 | 闵行区教育学院 | 上海市金汇实验学校 | 上海师范大学第三附属实验学校 | 嘉定区华亭中学 | 闵行第二中学 | 闵行区北桥中学 | 闵行区复旦万科实验学校 | 闵行区古美学校 | 闵行区华漕学校 | 上海市师资培训中心实验基地附属中学 | 闵行区教师进修学院附属梅陇实验学校 | 闵行区龙柏中学 | 闵行区明星学校 | 闵行区梅陇中学 | 闵行区浦江第一中学 | 闵行区浦江第二中学 | 七宝中学 | 闵行区启音学校 |...

Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities

Document Title: =============== Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1235 Release Date: ============= 2014-03-28 Vulnerability Laboratory ID VL-ID: ====================================...

KindEditor 4.1.2 (name parameter) Reflected XSS Vulnerability

Summary KindEditor online HTML editor is a set of open source, mainly for users on the site to get WYSIWYG editing effects, developers can replace the traditional multi-line text input box textarea KindEditor rich visualization text input box. Description KindEditor is prone to a reflected...

ecmall local packet letter(0day)-vulnerability warning-the black bar safety net

ECMall community e-Commerce systemreferred to as ECMallis Shanghai commercial school network Technology Co., Ltd. following the ECShop after the launch of yet another e-Commerce sister products. Recently saw dark clouds on the storm a ecmall full version file package letter vulnerability, its own...

Shanghai Freemen SQL Injection

+Title : SHANGHAI FREEMEN Sql Injection +Vender : http://www.shanghai-freemen.com/ +Auther : Bl4ck.Viper Turkish Hacker +Email : [email protected] +Date : 01/07/2011 +Home : www.skote-vahshat.com Err0r 0n : hot.asp Exploit : http://target.com/products/hot.asp?id=SQL Demo :...

ECMall 2.2 app/groupbuy.app.php delay injection vulnerability-vulnerability warning-the black bar safety net

ECMall community e-Commerce systemreferred to as ECMallis Shanghai commercial school network Technology Co., Ltd. following the ECShop after the launch of yet another e-Commerce sister product app\groupbuy. app. php:2 6: function index $id = empty$GET'id' ? 0 : $GET'id'; //id not filtered if !$ i...

phppgadmin -- cross site scripting vulnerability

SecurityFocus reports about phppgadmin: Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch...

[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in Web Mail platform by "Mirapoint"

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Web Mail platform by "Mirapoint" Discovered Date: 19/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.mirapoint.com/ Details: Mirapoint Web Mail platform is prone to a Cross Site...

Directory traversal

Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...

CVE-2006-0223

Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...