SQL Injection Vulnerability in Aj***.ashx of VUMAI Software (Shanghai) Co.

Ltd. is a foreign trade SaaS service provider, but also a professional foreign trade industry solutions provider. Ltd. VUMA Software Aj.ashx There is a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2020-11598

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote attackers to execute arbitrary code by uploading and executing an ASHX file...

Code injection

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote attackers to execute arbitrary code by uploading and executing an ASHX file...

CVE-2020-11598

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote attackers to execute arbitrary code by uploading and executing an ASHX file...

CVE-2020-11598

CVE-2020-11598 affects CIPPlanner CIPAce 9.1 Build 2019092801; Upload.ashx lets remote attackers upload and execute an ASHX file to achieve arbitrary code execution. The connected sources corroborate a code-execution vector via file upload, with no explicit exploit details or patch information pr...

SQL Injection Vulnerability in Ha***.ashx Page of Morphology Digital Lab Teaching Platform

Morphology digital experimental teaching platform is a virtual reality system with the core of computer virtual reality and digital simulation technology, supported by biosimulation engine, processing factor database, virtual environment interface and other technologies. SQL injection vulnerabili...

CVE-2017-17762

XML external entity XXE vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx...

CVE-2018-9126

The DNNArticle module 11 for DNN formerly DotNetNuke allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI...

XXE Vulnerability in Microxia Online Learning Platform

Micro Xia Online Learning Platform is an online education system based on B/S architecture. XXE injection vulnerability exists in /Ajax/InResult.ashx, which can be exploited by an attacker to remotely read arbitrary files on the server...

RaiseDreams Crowdfunding System version 2.2.4 SQL Injection Vulnerability in '/User/Handler1.ashx' File

RaiseDreams is an enterprise-level crowdfunding website platform. A SQL injection vulnerability exists in the '/User/Handler1.ashx' file in version 2.2.4 of the RaiseDreams Crowdfunding System, which allows an attacker to exploit the vulnerability to execute SQL statements, as well as add a super...

SQL Injection Vulnerability in the CaptionType Parameter of the GetCaption.ashx Page of Nanjing Fargo Streaming Media System

Nanjing Fargo streaming media system is mainly used for applications such as network TV, live event broadcasting, remote education, enterprise roadshow and multimedia public information service, etc. The system integrates computer, network, audio and video and mobile communication and other relat...

memberforms.spiritoftasmania.com.au Open Redirect vulnerability

Vulnerable URL: http://memberforms.spiritoftasmania.com.au/etrack.ashx?M=1367.D9000047-9949-48C4-845B-5A941A00B0BF=209851=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Public...

SQL Injection Vulnerability in Widget Parameters of Hangzhou Elite Online Education Technology Online Learning Platform

Hangzhou Elite Online Education Technology Online Learning Platform is an education and training platform. A SQL injection vulnerability exists in the widget parameters of the WidgetsHandler.ashx page of the Hangzhou Elite Online Education Technology online learning platform. Comprehensive...

Taoyuan Network Hard Drive 2. x for . NET version of the arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

No filter ashx Upload 1. ashx file To access the directory http://www/myfile/ 用户名 /1.ashx %@ WebHandler Language="C" Class="Handler" % using System; using System. Web; public class Handler : IHttpHandler public void ProcessRequest HttpContext context context. Response. ContentType = "text/plain";...

phpwind 8.7 background to get shell-vulnerability warning-the black bar safety net

phpwind 8.7 background to get the shell The first point to open the background map and then attachment settings to add a ashx suffix 2 0 0 0 size 群 里面 我 以前 扔 的 那个 ashx.txt download back into the fuck. ashx Published article there's an attachment upload the ashx throw up the premise is iis Apache ...

Taoyuan disk through the kill batch getshell-a vulnerability warning-the black bar safety net

Source Forum: guest Forum the http://team.f4ck.net on Starting blog: maniac blog the http://Madman.in on Author: ghostly lamb Google keywords: inurl:guestly. aspx First: first see whether there can be a test of the “guest” account ! If there is, click the file management→upload→upload ashx horse ...

CVE-2009-3451

The CVE-2009-3451 entry describes a directory traversal vulnerability in RADactive I-Load’s WebCoreModule.ashx, affecting versions prior to 2008.2.5.0. The flaw enables remote attackers to read arbitrary files via unspecified vectors due to improper input handling in the WebCoreModule.ashx compon...