Optergy 2.3.0a - Cross-Site Request Forgery (Add Admin)

Title: Optergy 2.3.0a - Cross-Site Request Forgery Add Admin Author: LiquidWorm Date: 2019-11-05 Vendor: https://optergy.com/ Product web page: https://optergy.com/products/ Affected version: history.pushState'', '', '/' input type="hidden" name=...

Optergy 2.3.0a - Cross-Site Request Forgery (Add Admin)

Optergy 2.3.0a - Cross-Site Request Forgery Add Admin Title: Optergy 2.3.0a - Cross-Site Request Forgery Add Admin Author: LiquidWorm Date: 2019-11-05 Vendor: https://optergy.com/ Product web page: https://optergy.com/products/ Affected version: history.pushState'', '', '/' input type="hidden"...

eMerge E3 1.00-06 - Privilege Escalation

eMerge E3 1.00-06 - Privilege Escalation Exploit Title: eMerge E3 1.00-06 - Privilege Escalation Google Dork: NA Date: 2018-09-11 Exploit Author: LiquidWorm Vendor Homepage: http://linear-solutions.com/nscfamily/e3-series/ Software Link: http://linear-solutions.com/nscfamily/e3-series/ Version:...

Optergy 2.3.0a - Remote Code Execution Exploit

Exploit for hardware platform in category web applications Title: Optergy 2.3.0a - Remote Code Execution Author: LiquidWorm Vendor: https://optergy.com/ Product web page: https://optergy.com/products/ Affected version: =2.3.0a Advisory: https://applied-risk.com/resources/ar-2019-008 Paper:...

Prima Access Control 2.3.35 - Arbitrary File Upload Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Prima Access Control 2.3.35 - Arbitrary File Upload Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/...

eMerge E3 1.00-06 - Arbitrary File Upload

Exploit Title: eMerge E3 1.00-06 - Arbitrary File Upload Google Dork: NA Date: 2018-11-11 Exploit Author: LiquidWorm Vendor Homepage: http://linear-solutions.com/nscfamily/e3-series/ Software Link: http://linear-solutions.com/nscfamily/e3-series/ Version: 1.00-06 Tested on: NA CVE : CVE-2019-7257...

Optergy 2.3.0a - Remote Code Execution

Title: Optergy 2.3.0a - Remote Code Execution Author: LiquidWorm Date: 2019-11-05 Vendor: https://optergy.com/ Product web page: https://optergy.com/products/ Affected version: =2.3.0a Advisory: https://applied-risk.com/resources/ar-2019-008 Paper:...

SQL injection vulnerability in the ad***.php page ti***, em***, un***, co*** parameters of the website building system of Huizhou Zhongxing Internet Technology Co.

Zhongxing Internet technology station building company is a Huizhou professional network marketing system service providers, focusing on website construction and SEO optimization of a reasonable combination. Huizhou City Zhongxing Internet Technology Co., Ltd. station building system ad.php page...

SQL Injection Vulnerability in Suzhou Tianhui's Website Building System

Suzhou Tianhui company website building system can easily and quickly manage the enterprise website, customize the content of the framework of the website, and can upgrade the website at any time. There is a SQL injection vulnerability in the system, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Yunye CMS v2.0

Yunye cms enterprise building system is a specialized for small and medium-sized enterprise website construction of php open source cms. Yunye CMSv2.0 SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

Ocean Blue website builder system has a logic flaw vulnerability

Ocean Blue Station Building System is a station building system opened by Shenzhen Ocean Blue Technology Co. Ocean Blue website builder system has a logic flaw vulnerability. Attackers can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Website Building System of Wuhan Bajie Group Information Technology Co.

Wuhan Bajie Group Information Technology Co., Ltd. is a company that provides integrated solutions of development, operation, training and promotion for enterprises. There is a SQL injection vulnerability in the website building system of Wuhan Bajie Group Information Technology Co., Ltd, which c...

SQL Injection Vulnerability in PHPMyWind Website Building System (CNVD-2019-43877)

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . There is a SQL injection vulnerability in the PHPMyWind website builder system, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Guangzhou HYU Network Technology Co.

Guangzhou HY Network Technology Co., Ltd. is a comprehensive enterprise specializing in providing customers with a series of corporate services such as website, mailbox, advertising, software, finance and tax. Guangzhou Hopeful Network Technology Co., Ltd. website building system has SQL injectio...

Customer Experience and IT

Earlier this month, Akamai participated in CX Day, a global event dedicated to the customer experience. This was our first time celebrating, and I was lucky enough to join my fellow leaders for the event. I got my start at Akamai in Professional Services, so CX has always been central to my work,...

SQL Injection Vulnerability in Shenzhen AsiaNetwork's Website Building System

Ltd. provides high-quality website construction | web development | domain name application | website filing | mailbox application | server rental products and services. SQL injection vulnerability exists in the website building system of Shenzhen YANET, which can be exploited by attackers to...

File Upload Vulnerability in TopCloud Self-service Website Building System

The top cloud station system is Chongqing Chujie Technology Co., Ltd. independent research and development "PC + cell phone + micro site + shopping" integration of the whole network marketing PHP enterprise intelligent station software. Peak cloud self-service website building system file upload...

Logic Flaw Vulnerability in S-CMS School Building System

S-CMS School Building System is a content management system for school websites. S-CMS School Building System has a logic flaw vulnerability that can be exploited by attackers to conduct mailbox bombing attacks...

SQL Injection Vulnerability in Website Building System of Beijing Zhengmeng Network Technology Co.

Beijing Positive Quantity Network Technology Co., Ltd. is a procurement and supply chain e-commerce service company. A SQL injection vulnerability exists in the website building system of Beijing Zhengmeng Network Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Wuxi Time Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Time Network is a service outsourcing enterprise that integrates the development of network application technology, creative website design, network marketing and promotion services, and provides a full set of network marketing solutions, and is a professional company that focuses on...