SQL Injection Vulnerability in the Website Building System of Lianchuang Internet (Beijing) Technology Limited (CNVD-2021-35865)

Ltd. is a provider of interactive web website building/marketing services. A SQL injection vulnerability exists in the website builder system of Lianchuang Internet Beijing Technology Co. The vulnerability can be exploited by an attacker to obtain sensitive information from the database...

File Upload Vulnerability in Website Building System of Shandong Guozi Software Co.

Shandong Guozi Software Co., Ltd. is a professional application software product development and industry solution provider. A file upload vulnerability exists in the website builder system of Shandong Guozi Software Co. Ltd, which can be exploited by attackers to gain control of the server...

Directusv8 Code Issues Vulnerabilities

Directusv8 is GlobalDirectusv8 open source an application system provides a CMS website builder . A security vulnerability exists in versions prior to Directus 8 8.8.2, which can be exploited by attackers to execute arbitrary code...

Unauthorized Access Vulnerability in Website Building System of Jiangsu Shidewei Network Technology Co.

Ltd. was founded in 2004, is the Shidewei Industrial Group's enterprises. It is an Internet company specializing in enterprise network marketing, e-commerce operation and software development services. An unauthorized access vulnerability exists in the website builder system of Jiangsu Shidewei...

CVE-2021-24201

In the Elementor Website Builder WordPress plugin before 3.1.4, the column element includes/elements/column.php accepts an ‘htmltag’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified...

CVE-2021-24202

In the Elementor Website Builder WordPress plugin before 3.1.4, the heading widget includes/widgets/heading.php accepts a ‘headersize’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modifie...

CVE-2021-24202

In the Elementor Website Builder WordPress plugin before 3.1.4, the heading widget includes/widgets/heading.php accepts a ‘headersize’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modifie...

Design/Logic Flaw

In the Elementor Website Builder WordPress plugin before 3.1.4, the icon box widget includes/widgets/icon-box.php accepts a ‘titlesize’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modifi...

WordPress插件Elementor Website Builder 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

WordPress插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. plugin for WordPress. A security vulnerability exists in the WordPress plugin Elementor Website Builder prior to version 3.1.4 that stems from the heading widget includes/widgets/heading.php accepting the headersize parameter...

WordPress 跨站脚本漏洞

WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. elementor is a drag-and-drop website builder plugin used in it. A security vulnerability exists in the WordPress plugin...

WordPress插件Elementor Website Builder 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Related Posts is a plugin for adding related content.iframe is an inline frame for embedding another document into the current HTML document.Elementor Page Builder...

WordPress 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

SQL Injection Vulnerability in the Website Building System of Beijing Bolehoo Technology Co. Ltd (CNVD-2021-26011)

Beijing Bleihoo Technology Co., Ltd. is a planning, design, production, technology development in one of the oldest website building company. There is a SQL injection vulnerability in the website builder system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Xinyun Website Building System

Xinyun Network is an Internet company specializing in website construction, web design and website production. SQL injection vulnerability exists in XinYun Network website builder system, which can be exploited by attackers to obtain sensitive database information...

VulnCheck KEV: CVE-2021-24204

In the Elementor Website Builder WordPress plugin before 3.1.4, the accordion widget includes/widgets/accordion.php accepts a ‘titlehtmltag’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send...

File Upload Vulnerability in Website Building System of Yue Information Network Co.

Shou Yueh Information Network Co., Ltd. is a company that combines the expertise of information network, marketing channel, and system software. A file upload vulnerability exists in the website builder system of Shouyue Information Network Co. An attacker could exploit this vulnerability to gain...

SQL Injection Vulnerability in Enterprise Torch China's Website Building System (CNVD-2021-22995)

Founded in 2005, Enterprise Torch China is an early technology innovation company providing Internet application services for enterprise informationization construction. A SQL injection vulnerability exists in Enterprise Torch China's website builder system, which can be exploited by attackers to...

Sunflower Technology website builder system suffers from SQL injection vulnerability

Sunflower Technology, mainly engaged in government, enterprises and institutions Internet access project, computer network engineering, Zhengzhou website construction, Henan website construction, network office system development and application, e-commerce and Internet value-added services...

Niu Mai Network Technology Co., Ltd. website builder system has SQL injection vulnerability

Niu Mai Network Technology Co., Ltd. is dedicated to the design, production and development of courier management systems and corporate websites. There is a SQL injection vulnerability in Niu Mai Network Technology Co. An attacker can exploit the vulnerability to obtain sensitive information from...