SQL Injection Vulnerability in Jiangyin Shun Enterprise Information Technology Co.

Jiangyin Shun Enterprise Information Technology Co., Ltd. is a professional enterprise dedicated to providing Internet application services and independent software development for enterprise informatization. There is a SQL injection vulnerability in the enterprise website building system of...

SQL Injection Vulnerability in China Business Network Enterprise Website Building System

Ltd. is a professional e-commerce integration services company, mainly for enterprises to provide network infrastructure, internal information technology, e-commerce and community solutions. A SQL injection vulnerability exists in Zhongshang Network's enterprise website building system. Attackers...

PHPOK Arbitrary File Upload Vulnerability

PHPOK is an enterprise building system that supports expansion. An arbitrary file upload vulnerability exists in PHPOK version 4.8.338. An attacker can exploit this vulnerability to upload arbitrary files...

SQL Injection Vulnerability in Vanguard Digitizing System

Vanguard Digital Technology Inc. provides web animation, graphic visual design, online advertising and marketing, and multimedia CD-ROM production services. A SQL injection vulnerability exists in the Vanguard Digital Web Building System. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in Website Building System of Tian Xun Network Technology Co.

Tianxun Network Technology Co., Ltd. is a professional enterprise engaged in Internet services, focusing on corporate website planning and construction, WeChat public platform development, website optimization, online store decoration, online store operation, promotion account hosting services...

SQL Injection Vulnerability in the Website Building System of Tai'an Star Network Technology Co.

Tai'an Star Networks Co., Ltd. is a website construction, website promotion, Internet marketing, 400 free phone calls and other businesses, with Internet technology as the core of the high-tech enterprises. Taian Star Network Technology Co., Ltd. station building system there are SQL injection...

CVE-2018-8805

Yxcms building system compatible cell phone v1.4.7 has XSS via the content parameter to protected\apps\default\view\default\extendguestbook.php or protected\apps\default\view\mobile\extendguestbook.php in an index.php?r=default/column/index&col=guestbook request...

Design/Logic Flaw

Yxcms building system compatible cell phone v1.4.7 has XSS via the content parameter to protected\apps\default\view\default\extendguestbook.php or protected\apps\default\view\mobile\extendguestbook.php in an index.php?r=default/column/index&col=guestbook request...

Yxcms Logic Flaw Vulnerability

Yxcms building system compatible cell phone is a website creation system. A security vulnerability exists in the protected\apps\member\controller\shopcarController.php file in version 1.4.7 of the Yxcms building system compatible cell phone. The vulnerability can be exploited by an attacker to...

CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

Design/Logic Flaw

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

CVE-2018-8761

CVE-2018-8761 : In Yxcms building system (compatible cell phone) v1.4.7, a logic flaw in the file protected\apps\member\controller\shopcarController.php allows an attacker to modify a price before form submission by observing data in a packet capture. The vulnerability is described in multiple so...

CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

SQL Injection Vulnerability in Taicang Suyi Information Technology Co.

Taicang Suyi Information Technology Co., Ltd. is a technology-oriented enterprise integrating website construction, software development, mobile application development, interface design and system integration. There is a SQL injection vulnerability in the website building system of Taicang Suyi...

SQL injection vulnerability in news_detail.php page of website building system of Zhuhai Shuangyang Network Technology Co.

Zhuhai Shuangyang Network Technology Co., Ltd. is engaged in website construction, system development, network marketing and other services. Zhuhai Shuangyang Network Technology Co., Ltd. building system newsdetail.php page SQL injection vulnerability, attackers can use the vulnerability to obtai...

SQL Injection Vulnerability in Website Building System of Shenzhen Sanliwu Technology Co.

Shenzhen Three Six Five Technology Co., Ltd. is an Internet application technology and professional network communication service provider. Shenzhen Three Six Five Technology Co., Ltd. website construction system has a SQL injection vulnerability, allowing attackers to exploit the vulnerability t...

SQL Injection Vulnerability in Website Building System of SHENYI TECHNOLOGY GROUP LIMITED

SHENYI TECHNOLOGY GROUP LIMITED is a comprehensive service-oriented enterprise pioneering website construction and network application services, mobile APP development, big data mining, cloud computing, Internet of Things, smart home, intellectual property agency, investment and financing service...

SQL Injection Vulnerability in Zhuhai Meitian Web Design Co.

Zhuhai Meitian Web Design Co., Ltd. is a manufacturer and supplier dedicated to web production and website promotion. Zhuhai Meitian Web Design Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited by attackers to obtain sensitive information from the...