File Upload Vulnerability in Phisung House Website Building System

Phaethon House is an online notebook for operators and maintainers. A file upload vulnerability exists in the Phaidon House builder system that can be exploited by an attacker to gain control of the server...

SQL Injection Vulnerability in Toonhill Studio's Website Building System

Toonhoe Studios is an internet solution provider and website development company. A SQL injection vulnerability exists in the Toonhide Studio website builder system, which can be exploited by attackers to obtain database information...

Changsha Mito Information Technology Co., Ltd. enterprise website building system suffers from arbitrary file reading vulnerability

Changsha Mito Information Technology Co., Ltd. enterprise station-building system is a suitable for enterprise station-building open source free CMS station-building system. Changsha Mito Information Technology Co., Ltd. enterprise website builder system has an arbitrary file read vulnerability,...

SQL Injection Vulnerability in Website Building System of Yuanqi Technology (Beijing) Co.

Ltd. was founded in May 2014, is committed to become a "private cloud-based service provider of a new generation of enterprise information management system". A SQL injection vulnerability exists in the website building system of Yuanqi Technology Beijing Co., Ltd, which can be exploited by...

SQL Injection Vulnerability in in***.do Page of Website Building System at Shanghai BeltLeader Information Technology Co.

Ltd. is a new technology company based on independent innovation, to provide enterprises with the most valuable Internet products and services. A SQL injection vulnerability exists in the in.do page of the website building system of Shanghai BeltLeader Information Technology Co. An attacker can...

Jindao Information Technology (Shanghai) Co., Ltd T - SITE Enterprise Intelligent Website Building System has Arbitrary File Download Vulnerability

Jindao Information Technology Shanghai Co., Ltd Jindao for short, Jindao since its inception, focusing on digital marketing technology, products, services, resources, innovation and integration, has now formed the world's leading SaaS Intelligent Marketing Cloud Platform www.71360.com, the...

WonderCMS 3.1.3 - 'Menu' Persistent Cross-Site Scripting

Exploit Title: WonderCMS 3.1.3 - 'menu' Persistent Cross-Site Scripting Date: 20-11-2020 Exploit Author: Hemant Patidar HemantSolo Vendor Homepage: https://www.wondercms.com/ Version: 3.1.3 Tested on: Windows 10/Kali Linux Contact: https://www.linkedin.com/in/hemantsolo/ CVE: CVE-2020-29469 Attac...

Diveshlunker Bloodx SQL注入漏洞

Diveshlunker Bloodx is a Php-based website builder for blood bank management by the individual developer Diveshlunker. BloodX version 1.0 suffers from a SQL injection vulnerability that can be exploited by attackers to bypass authentication...

SQL Injection Vulnerability in Enping Wanshang Web Design Studio's Website Building System

Enping Wanshang Web Design Studio was founded in September 2016, and its business scope includes web design and website construction. There is a SQL injection vulnerability in the website building system of Wanshang Web Design Studio in Enping City, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Chongqing Billion Information Technology Co.

Ltd. referred to as: billion online, Chongqing billion is dedicated to brand website construction, Internet application development and network marketing, website construction is an important step in network marketing, according to the purpose of the enterprise's station, the overall positioning ...

WordPress Elementor Website Builder plugin <= 3.0.13 - Unrestricted SVG Uploads vulnerability

Unrestricted SVG Uploads vulnerability found in WordPress Elementor Website Builder plugin versions = 3.0.13. Solution Update the WordPress Elementor Website Builder plugin to the latest available version at least 3.0.14...

Shijiazhuang Renaud Network Technology Co., Ltd. website building system has a denial of service vulnerability

Shijiazhuang Renaud Network Technology Co., Ltd. was founded in 2008, 12 years focusing on the application of Internet and information technology to help China's economic transformation and upgrading. Shijiazhuang Renaud Network Technology Co., Ltd. station building system there is a denial of...

Beijing Yunmeng Network Technology Co., Ltd. website building system has logical flaws and vulnerabilities

Beijing Yunmeng Intelligent Technology Co., Ltd hereinafter referred to as Yunmeng is a well-known provider of cloud computing software applications in China. There is a logic flaw vulnerability in the website building system of Beijing Yunmeng Network Technology Co. Attackers can utilize the...

SQL Injection Vulnerability in the Website Building System of Beijing Zhongcheng Kexin Technology Development Co.

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the website building system of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain sensitive...

SQL injection vulnerability in website building system of Shantou Sanhut Technology Co. Ltd (CNVD-2020-67356)

Ltd. mainly does PC website, mobile website, WeChat public number, small program kind of line, built-in super marketing and promotion tools. By Shantou Sihu Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited by attackers to obtain sensiti...

Harbin Weicheng Technology Co., Ltd. OurPHP Ao Pai station building system exists arbitrary file deletion vulnerability

OurPHP Aopia website building system is a enterprise + e-commerce marketing website building system. Harbin Weicheng Technology Co., Ltd OurPHP AoPai website builder system exists arbitrary file deletion vulnerability, an attacker can take advantage of the vulnerability to delete any file under t...

SQL Injection Vulnerability in Hangzhou New Windows Information Technology Co.

Hangzhou New Window Information Technology Co., Ltd. is a national high-tech enterprise with intelligent property as its core business. There is a SQL injection vulnerability in the website building system of Hangzhou New Windows Information Technology Co. An attacker can exploit the vulnerabilit...

Shanghai Yongxi Information Technology Co., Ltd. website building system has SQL injection vulnerability

Shanghai Yongxi Information Technology Co., Ltd. is a creative team dedicated to the fusion of technology and business, providing differentiated services and solutions that benefit our customers. Shanghai Yongxi Information Technology Co., Ltd. website builder system has a SQL injection...

File Upload Vulnerability in S-CMS Enterprise Website Building System (CNVD-2020-65194)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a file upload vulnerability in S-CMS, which can be exploited by an attacker to gain control of the server...

SQL Injection Vulnerability in Situo Travel CMS Website Construction System of Sichuan Situo Smart Travel Software Co.

SituTravel CMS Website Builder is a self-developed website management system suitable for building travel websites. Ltd. SITO Travel CMS website builder system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...