68 matches found
Days Bo online training system St_Son_Index. aspx, etc. 6 SQL injection vulnerability
No description provided by source...
Days Bo online training system network school Edition Course_Class_List_Default. aspx the parameter cid SQL injection vulnerability
No description provided by source...
上海天柏在线培训系统 /WebPage/Paying.aspx 等11处 SQL注入漏洞
No description provided by source...
某通用培训系统四处SQL注入漏洞
简要描述: 详细说明: 某通用培训系统四处SQL注入漏洞。 四处SQL注入: http://.../WebOrg/DdcbView.aspx?infoid=58 http://.../WebOrg/DdcbView.aspx?infoid=97 http://.../webOrg/AboutUs.aspx?infoid=a http://.../WebOrg/AboutUs.aspx?infoid=a http://.../WebOrg/QaQuertList.aspx?info=4123 http://.../WebOrg/QaQuertList.aspx?info=4139...
某在线培训系统通用SQL注入漏洞
简要描述: 详细说明: 某在线培训系统通用SQL注入漏洞。 http://.../WebOrg/TCHlist.aspx?typeid=9 http://.../WebOrg/TCHlist.aspx?typeid=9 http://.../WebOrg/TCHlist.aspx?typeid=9 http://.../WebOrg/TCHlist.aspx?typeid=9 http://.../WebOrg/TCHlist.aspx?typeid=9 http://.../WebOrg/TCHlist.aspx?typeid=9 漏洞证明:...
Online Training Management System Generalized Arbitrary File Download Vulnerability of Beijing Jianfeng Hexun Technology Co.
Peak Hutchinson's Online Training Management System is a software system that provides full-process management of training activities for learning organizations. There is a generic arbitrary file download vulnerability in the online training management system of Beijing Summit Hexun Technology Co...
某在线培训系统SQL盲注漏洞
简要描述: rt 详细说明: 官网站:http://.../Login.aspx 在注册用户,检测用户名是否存在 处存在POST注入! 附:...:8000/ 一例 数据包如下: POST /CscAjax/ajax.aspx HTTP/1.1 Host: ... Proxy-Connection: keep-alive Content-Length: 63 Accept: text/html, / Origin: http://... X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 Windows NT 6.1; WOW...
pilotgroup-sql.txt
--==+================================================================================+==-- --==+ Pilot Online Training Solution Remote SQL Injection Vulnerbility +==-- --==+================================================================================+==--...