SQL Injection Vulnerability in Website Building System of Zhongshan NetLink Information Technology Co.

NetLink provides a series of Internet solutions for customers: including website construction, brand image design, Internet software development and application solutions, network promotion and other services. Zhongshan NetLink Information Technology Co., Ltd. website building system has SQL...

SQL Injection Vulnerability in Xi'an Van Gogh Network Technology Co.

Xi'an Van Gogh Network Technology Co., Ltd. is a company engaged in the company website construction, do website company, website design and production, Xi'an website production, cell phone website production and so on. A SQL injection vulnerability exists in the website building system of Xi'an...

SQL Injection Vulnerability in Tangshan Great Wall Network's Website Building System

The Great Wall Network Building System is a website building system. SQL injection vulnerability exists in the gsjj.asp page of the Great Wall Network website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Guangzhou Chuangke Network Co.

Guangzhou Chuangke Network Co., Ltd. is a website construction and Internet marketing service provider. There is a SQL injection vulnerability in the website building system of Guangzhou Chuangke Network Co., Ltd. which can be exploited by attackers to obtain the account password of the backend...

SQL Injection Vulnerability in Nanchang Jiarui Website Building System

Nanchang Jiarui Technology is a company specializing in all aspects of the application of enterprise information technology services, business scope includes: mobile APP development, website construction, software development, full network promotion, micro letter marketing. A SQL injection...

SQL Injection Vulnerability in Website Building System of Guangzhou Shuntian Computer Technology Co.

Shun Tian Technology is a domestic senior network technology service provider, with international leading website development technology, e-commerce technology, website full range of promotional technology and attentive after-sales customer service team. Guangzhou Shuntian Computer Technology Co....

XSS Vulnerability in Chengdu Firefox Technology Website Building System

Chengdu Firefox Technology Website Building System is a website building system. An XSS vulnerability exists in Chengdu Firefox Technology Website Builder. An attacker can use this vulnerability to inject arbitrary Web script or HTML to obtain sensitive information such as administrator cookies...

Backend Authentication Bypass Vulnerability in S-CMS

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS has a background authentication bypass vulnerability, due to the failure to accurately verify cookie information, an attacker can bypass login authentication by importing arbitrary cookie values...

SQL Injection Vulnerability in Ningxia Government Website Building System of Yinchuan Ruitong Fangsheng Information Technology Co.

Ningxia government website system is a set of software developed specifically for the Ningxia Autonomous Region government websites. SQL injection vulnerability exists in Ningxia Government Website System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in IDC Website Building System

IDC website building system is a set of intelligent website building system. The product suffers from a sql injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

XYCMS加盟店企业建站系统 v1.6 参数id SQL注入漏洞

No description provided by source...

XYCMS健身会所建站系统 v1.1 jsxm_detail.asp 参数id SQL注入漏洞

0x01漏洞简介 XYCMS健身会所建站系统采用asp+access架构。其v1.1版本在/jsxmdetail.asp处对参数id 过滤不严，导致出现SQL注入漏洞。 0x02漏洞详情 该系统默认存在一个管理员数据表adminuser，该表包含管理员名称字段admin和密码 md5加密字段password，远程攻击者可以结合union方式获取敏感信息，登陆后台，上传shell。 0x03修复方案 过滤。...

SQL Injection Vulnerability in Website Building System of Shenyang Woodman Culture Communication Co.

Shenyang Woodman Culture Communication Co., Ltd. is a high-tech company dedicated to website construction, mobile client app, customized system application software, e-commerce development and operation. The website building system developed by Shenyang Woodman suffers from SQL injection...

某通用型建站系统SQL注射之八

简要描述： 之八 详细说明： 某通用型建站系统SQL注射之八。 源码：XYCMS管理咨询公司建站系统 v4.2 地址：http://down.chinaz.com/soft/29472.htm 注入点：Showdxal.asp?id= 可搜索到实例： 实例如下： http://www.laco-hr.com/showdxal.asp?id=66 http://www.pundun.cn/showdxal.asp?id=66 http://www.szcxl.com/showdxal.asp?id=63 http://www.jshbls.com/showdxal.asp?id=19...

Sistem Biwes Multiple Vulnerability`

=================================================================== Sistem Biwes Multiple Vulnerability =================================================================== Author: eidelweiss @randyarios Product / software: SISTEM BIWES Vendor Site: http://sistembiwes.com/ Product Price: RM240 /...

MYPHP 4.0 企业建站系统上传漏洞

未能很好的过滤上传文件扩展而引起的上传漏洞 /adminc/downupload.php ====================================================================================== $downtype=".doc|.zip|.rar|.gif|.jpg|.jpeg|.png|.xls|.pdf|.ppt|.exe"; if !strstr$downtype, $imgtypetype echo "span class=txt请上传".$downtype."类型文件/span"; exit;...