Universal Password Login Vulnerability in Integrated Digital Campus Management System

Founded in 2009, Anhui Kexun Education Equipment Group Co., Ltd. is a comprehensive service provider dedicated to the research, development, promotion and service of industry software. A universal password login vulnerability exists in the Digital Campus Integrated Management System, which can be...

File Upload Vulnerability in Integrated Digital Campus Management System

Founded in 2009, Anhui Kexun Education Equipment Group Co., Ltd. is a comprehensive service provider dedicated to the research, development, promotion and service of industry software. A file upload vulnerability exists in the Digital Campus Integrated Management System DCIMS, which can be...

SQL Injection Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.(CNVD-2020-33072)

Digital campus is based on digital information and network, established on computer and network technology for the collection, processing, integration, storage, transmission and application of campus information on teaching, scientific research, management, technical services, life services, etc....

SQL Injection Vulnerability in Digital Campus Management System type=Detail&FileId Parameter of Shanghai Pengda Computer System Development Co.

The digital campus system of Shanghai Pengda Computer System Development Co., Ltd. is a technology platform using .NET+SqlServer. NET+SqlServer technology platform. SQL injection vulnerability exists in the Digital Campus Management System/BG/GRBG/FileManage/FileUPload.aspx page of Shanghai Pengd...

某通用校园管理系统权限不严格（默认密码）

简要描述： 可以通过系统内置低权限账号，获取高权限超级管理员密码 详细说明： 在官方演示站http://www.suyaxing.com:81/WS2004/default.asp 以官方公告的口令admin/admin登陆演示站 演示站用户看到Vodadmin 密码为星号，用星号密码查看器看到密码是11。（随后测试了20个站，都是内置这个账号） Vod管理员密码修改后貌似会和官方的Vod视频源冲突所以没有用户敢改。 接下来---------做实验，随机抽个站 实验站：http://www.fjzhyz.cn/ 系统内置低权限账号：Vodadmin 密码11...

某通用校园管理系统绕过限制getshell（需登录）

简要描述： 某通用校园管理系统绕过限制getshell 详细说明： 接着上次的漏洞来getshell------某通用校园管理系统权限不严格 http://www.wooyun.org/bugs/wooyun-2014-059827/ http://www.fjzhyz.cn/ws2004 用上次的漏洞来获取炒鸡管理员账号登录。 系统管理----资源下载---资源设置 http://www.fjzhyz.cn/ws2004/sysmanage/Resource/resset/default.asp 随便找个分类，修改为如下的设置。我修改的是—优秀课件分类...