ZYCH Free Planning Enterprise Website Management System Exists Universal Password Login Vulnerability

ZYCH Free Planner Enterprise Website Management System is an intelligent ASP website management program based on Free Planner Enterprise Website Management System. A universal password login vulnerability exists in the '/admin/login.asp' page of ZYCH Free Planning Enterprise Website Management...

SQL injection vulnerability in cms company.asp file id parameter

Tianjin Qihang enterprise station building cms is a website building system. SQL injection vulnerability exists in the id parameter of the company.asp file. An attacker can use this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in 'sex' parameter of ESPCMS Enterprise Website Management System

ESPCMS enterprise website management system is based on LAMP development and construction of enterprise website management system. A SQL injection vulnerability exists in the official version of ESPCMS V6.7.17.04.05 UTF8. The lack of filtering of the 'sex' parameter allows attackers to exploit th...

ESPcms latest version has http header XSS vulnerability

ESSENCE ESPCMS website management system based on LAMP development and construction of the website management system. An http header XSS vulnerability exists in the latest version of ESPcms. The attacker triggers the cross-site vulnerability by modifying the Referer value to cross-site code...

Xunfei Jingcheng Smart Campus Website Management System Has Overstepping Vulnerabilities

Smart Campus website management system is a classroom management system based on constructivist learning theory, "Internet +" way of thinking and big data, cloud computing and other information technology. CyberLink Smart Campus website management system is vulnerable to an override vulnerability...

ZYCHCMS V03 '/include/page.asp' file has an arbitrary directory traversal vulnerability

ZYCHCMS is an enterprise website management system. An arbitrary directory traversal vulnerability exists in the ZYCHCMS V03 '/include/page.asp' file. This allows an attacker to traverse directories and view sensitive directory and file information...

SDCMS Attachment Management Plugin Has Arbitrary File Deletion Vulnerability

SDCMS is a fireworks network independent research and development of PHP three-in-one website management system. Php + Mysql architecture, support Php5.5-7.x series of versions. SDCMS php version of the latest version of the attachment management plug-in there are arbitrary file deletion...

Arbitrary file deletion vulnerability in SDCMS backend errorcontroller.php page

SDCMS is a website management system managed and developed by Suzhou Smoke & Fire Network Technology Co. SDCMS background errorcontroller.php page exists arbitrary file deletion vulnerability, allowing attackers to exploit the vulnerability to obtain, delete arbitrary files, can lead to system...

Reflective XSS cross-site scripting vulnerability in Youdiancms enterprise website management system

Youdiancms Enterprise Website Management System is an enterprise website building system developed by Changsha Youdian Software Technology Co. An XSS cross-site scripting vulnerability exists in the index.php/channel/search/ page of the Youdiancms enterprise website management system. An attacker...

CwCMS-PHP Enterprise Website Management System Has Multiple Cross-Site Scripting Vulnerabilities

CwCMS-PHP is an enterprise website management system. Version 1.0 of the CwCMS-PHP enterprise website management system has multiple cross-site scripting vulnerabilities that allow attackers to write to arbitrary executable files and gain server privileges...

Hope Technology enterprise website management system id parameter has SQL injection vulnerability

Hope Technology Enterprise Website Management System is a content management system developed by Anhui Hope Network Technology Co. based on ThinkPHPCMS. Hope Technology enterprise website management system id parameters exist SQL injection vulnerability, attackers can use the vulnerability to...

Anhui Hope Technology enterprise website management system cateid parameters exist SQL injection vulnerability

Hope Technology Enterprise Website Management System is a website management system developed and managed by Anhui Hope Network Technology Co. There is a SQL injection vulnerability in the cateid parameter of the Hope Technology enterprise website management system. Attackers can use the...

Dedecms presence of a stored cross site scripting vulnerability

Vulnerability description: Dedecms is an open source PHP open source website management system. Dedecms member function carbuyaction. php in the address, des, email, postname parameters there is stored XSS vulnerability, the attacker may exploit the vulnerability to obtain the administrator cooki...

SQL Injection Vulnerability in CWCMS v1.0

CWCMS is an enterprise website management system. A SQL injection vulnerability exists in version 1.0 of the CwCMS-PHP Enterprise Website Management System. It allows attackers to exploit the vulnerability to gain access to sensitive database information...

Jiayuan Talent Website Management System fr_admin_name parameter has SQL injection vulnerability

Jiayuan Talent Website Management System is a website management system based on PHP+MYSQL technology. A SQL injection vulnerability exists in the fradminname parameter of the Jiayuan Talent Website Management System. The program fails to effectively filter the fradminname parameter, allowing...

Weak Password Vulnerability in Free Planning Enterprise Website Management System

Free Planner Enterprise Website Management System is an ASP-based website builder. Freedom of planning enterprise website management system default weak password vulnerability, attackers exploit the vulnerability through the default weak password admin/admin login website background, get backgrou...

Weak Password Vulnerability in Dynamic Web Management System

Dynamic easy website management system is a series of independent research and development by the Foshan City, dynamic easy network technology limited company of the series of website management software products, for different industries to provide customers with reliable website construction...

Arbitrary File Upload Vulnerability in Web Management System V2.0 of Beijing Xinhongru Century Network Technology Co.

Beijing Xinhongru Century Network Technology Co., Ltd. provides a collection of website planning, design, interaction and production for leading brands in various industries, Program development in one of the customized website construction solutions, for specific projects, we will start from the...

Weak Password Vulnerability in Web Management System of Xi'an Netcom Network Technology Co.

Xi'an Netcom Network Technology Co., Ltd. website management system is to provide customers with a total solution for network marketing. A weak password vulnerability exists in the website management system of Xi'an Netco Network Technology Co. An attacker can utilize the default background as:...

Weak password vulnerability in the background management system of the website built by Luoyang Chancheng Network Technology Co.

Ltd. built website background management system is a website positioning analysis and recommendations, including website planning layout and structure of a complete set of solutions. There is a weak password vulnerability in the file /mgr/login.php of the background management system of the websi...