Local Service Search Engine Management System SQL注入漏洞

Local Service Search Engine Management System is a simple PHP/MySQLi project. SQL injection vulnerability exists in Local Service Search Engine Management System 1.0, which stems from a failure to properly validate input information and can be exploited to bypass the login page and gain backend...

Information Disclosure Vulnerability in Fibrsol Global Network FS801GW

Fibsol Global Networks Ltd. specializes in the design, development and manufacture of fiber optic networking products and components. Fibrsol Global Network FS801GW suffers from an information disclosure vulnerability, which can be exploited by an attacker to successfully log in to the backend vi...

CVE-2020-35929

In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for unauthorized access to remote data...

mkCMS v6.2.6 SQL Injection Vulnerability in Backend

mkCMS is a free and open source PHP content management system, small yet powerful, with tons of templates and more. mkCMS v6.2.6 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...

Beijing Yunmeng Network Technology Co., Ltd. website building system has logical flaws and vulnerabilities

Beijing Yunmeng Intelligent Technology Co., Ltd hereinafter referred to as Yunmeng is a well-known provider of cloud computing software applications in China. There is a logic flaw vulnerability in the website building system of Beijing Yunmeng Network Technology Co. Attackers can utilize the...

Shenyang Pangu Network Technology Co., Ltd. website building system has logical flaws and vulnerabilities

Shenyang Pangu Network Technology Co., Ltd. is a Baidu business as the core, for the local business to provide network marketing services of the Internet + group of companies. Shenyang Pangu Network Technology Co., Ltd. station-building system has a logical flaw vulnerability, attackers can use t...

Universal Password Login Vulnerability in portfolioCMS

portfolioCMS is an open source website building system. A universal password login vulnerability exists in portfolioCMS. An attacker can exploit this vulnerability to log into the system's backend...

Vulnerabilities in the website building system of Jinan Speed Information Technology Co.

Jinan Speed Information Technology Co., Ltd. is a network technology company that specializes in user experience design and development and Internet branding. Jinan Speed Information Technology Co., Ltd. station building system has a logic flaw vulnerability, attackers can use the vulnerability t...

Weak Password Vulnerability in SG-6000 Next-Generation Firewall from Shanshi Netcom

SG-6000 Next-Generation Firewall is a firewall product with intrusion prevention technology based on in-depth application, protocol detection and attack principle analysis. A weak password vulnerability exists in SG-6000, which can be exploited by attackers to access the backend management system...

Xiamen Haojing Technology Co., Ltd. building system there are logic flaws vulnerability

Xiamen Goodview Technology Co., Ltd. is a real estate agency industry Internet + service provider. Xiamen Goodview Technology Co., Ltd. building system has a logic flaw vulnerability, which can be exploited by an attacker to bypass authentication and gain unauthorized access to the backend...

Weak Password Vulnerability in Network Video Server of Longchamp Cintron

Ltd. is a provider of products and application solutions in the field of network video surveillance in China. A weak password vulnerability exists in the network video server, which can be exploited by an attacker to log in to the backend of the system...

File Upload Vulnerability in Extreme CMS Backend

Extreme CMS is open source and free PHPCMS web content management system. There is a file upload vulnerability in the backend of Extreme CMS, which can be exploited by attackers to upload malicious files and gain administrative privileges on the server...

Inspection management system web version has a universal password login vulnerability

Inspection management system is a service installed in the cloud platform, realizing multi-platform PC backstage management, APP instant view, patrol stick patrol, multi-department, multi-level, cross-region management of the patrol inspection system. There is a universal password login...

Unauthorized Access Vulnerability in Tongda OA

Tongda OA is a collaborative office automation software. Tongda OA has an unauthorized access vulnerability that can be exploited by attackers to bypass login and directly enter the background...

Logic Flaw Vulnerability in Jinwei Intelligent Restaurant System

Jinwei Intelligent Restaurant System is an internal management system for all major and small restaurants. A logic flaw vulnerability exists in Jinwei Intelligent Restaurant System, which can be exploited by an attacker to gain unauthorized access to the backend...

5iSNS Content Payment System 1.0.9 suffers from XSS vulnerability

The 5iSNS content payment system integrates functional modules such as post articles and documents with social features. An XSS vulnerability exists in 5iSNS Paid-for-Content System 1.0.9, which can be exploited by an attacker to obtain administrator cookie information and log into the backend of...

Login Bypass Vulnerability in the Integrated Reservoir Management Information System of Yangtze River Surveying, Planning and Designing Research Co.

The Yangtze River Survey, Planning, Design and Research Co., Ltd. is a science and technology-oriented enterprise engaged in engineering survey, planning, design, scientific research, consulting, construction supervision and management and general contracting business. There is a login bypass...

Login Bypass Vulnerability in LebiShop (Multi-Language Online Shopping Mall System)

Lebi multilingual online shopping mall system LebiShop, free , full open source , support for secondary development . NET 4.5 C language development , using SQL Server and MySQL database . LebiShop has a login bypass vulnerability that can be exploited by an attacker to log in to the backend of t...

Weak Password Vulnerability in Huasan ER3260 Router

Ltd. Huasan, mainly provides research, development, production, sales and services of IT infrastructure products and solutions. A weak password vulnerability exists in the Huasan ER3260 router, which can be exploited by an attacker to log into the router's backend...

CVE-2019-16698

The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...