Beijing Yiwuyun Data Technology Co., Ltd.'s ABC website building system has logical defects and vulnerabilities.

Beijing Yiwuyun Data Technology Co., Ltd. is an innovative company dedicated to providing basic internet data services and data operations for small and medium-sized enterprises. There are logical defects and vulnerabilities in Beijing Yiwuyun Data Technology Co., Ltd.'s ABC website construction...

EUVD-2022-39278

Malicious code in bioql PyPI...

CVE-2022-36572

Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution RCE vulnerability via the component /upload/admin.php?/deal/...

CVE-2023-39115

install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...

PT-2023-26790

Name of the Vulnerable Software and Affected Versions Campcodes Online Matrimonial Website System Script version 3.3 Description The issue allows for XSS via a crafted SVG document. This is possible through the "install/aiz-uploader/upload" endpoint. Recommendations For version 3.3, consider...

CVE-2023-39115

install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...

CVE-2023-39115: Unrestricted Upload of File with Dangerous Type

install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...

CVE-2023-39115

install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...

CVE-2023-39115

CVE-2023-39115 affects Campcodes Online Matrimonial Website System Script 3.3. the vulnerability is an arbitrary file upload via a crafted SVG, enabling code execution (SVG contains script and external navigation). Root cause: insufficient validation of uploaded SVG files. Affected component: ins...

CVE-2023-1418

A vulnerability classified as problematic was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file cashconfirm.php of the component POST Parameter Handler. The manipulation of the argument...

EARCLINK ESPCMS security vulnerability

Honghu Erchuang Netlink Information Technology EARCLINK ESPCMS is an enterprise website building system from Honghu Erchuang Netlink Information Technology, China. A security vulnerability exists in EARCLINK ESPCMS version P8.21120101, which originated from the discovery of a remote code executio...

Remote code execution

Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution RCE vulnerability via the component /upload/admin.php?/deal/...

CVE-2022-36572

Sinsiu Sinsiu Enterprise Website System v1.1.1.0 is affected by CVE-2022-36572, a remote code execution (RCE) vulnerability exploitable via the component /upload/admin.php?/deal/. The PT-2022-23479 advisory confirms an RCE impact and notes there is no available patch/version with a fix, recommend...

CVE-2022-36572: Undefined Security Weakness

Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution RCE vulnerability via the component /upload/admin.php?/deal/...

PT-2022-23479 · Sinsiu · Sinsiu Enterprise Website System

Name of the Vulnerable Software and Affected Versions: Sinsiu Sinsiu Enterprise Website System version 1.1.1.0 Description: The issue is related to a remote code execution RCE vulnerability. It can be exploited via the component /upload/admin.php?/deal/. Recommendations: For Sinsiu Sinsiu...

EARCLINK ESPCMS SQL Injection Vulnerability

Honghu Erchuang Netlink Information Technology EARCLINK ESPCMS is an enterprise website building system from China's Honghu Erchuang Netlink Information Technology Company. A SQL injection vulnerability exists in the espcmsweb/Search.php component of EARCLINK ESPCMS-P8, which can be exploited by...

File Upload Vulnerability in OKLite

OKLite is an enterprise website system, the main target group is the display enterprise website users, so that the traditional small business quickly deploy the website. A file upload vulnerability exists in OKLite, which can be exploited by attackers to upload a webshell and gain server privileg...

HuCart suffers from SQL injection vulnerability (CNVD-2021-54042)

HuCart is an open source enterprise building system. HuCart has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

XSS vulnerability in Jinan Speed Information Technology Co.

Jinan Speed Information Technology Co., Ltd. was founded in 2010, is a network technology company focusing on user experience design and development and Internet branding. There is an XSS vulnerability in Jinan Speed Information Technology Co., Ltd.'s website building system, which can be exploit...

SQL Injection Vulnerability in Guangzhou Baiwei Network Technology Co.

Guangzhou Baiwei Network Technology Co., Ltd. is committed to focusing on website construction, small program, APP, WeChat development and so on. Guangzhou Baiwei Network Technology Co., Ltd. website construction system SQL injection vulnerability, attackers can use the vulnerability to obtain...