579 matches found
CVE-2021-2159
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Frameworks. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...
CVE-2021-2159
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Frameworks. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...
CVE-2021-2159
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Frameworks. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...
CVE-2021-2159
CVE-2021-2159 affects Oracle PeopleSoft Enterprise CS Campus Community Frameworks 9.2. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to read a subset of data after a user is enticed to interact, per the CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N. ...
Universal Password Login Vulnerability in Integrated Digital Campus Management System
Founded in 2009, Anhui Kexun Education Equipment Group Co., Ltd. is a comprehensive service provider dedicated to the research, development, promotion and service of industry software. A universal password login vulnerability exists in the Digital Campus Integrated Management System, which can be...
Oracle PeopleSoft Enterprise CS Campus Community Frameworks 安全漏洞
Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Oracle. The products provide human capital management, financial management, supplier relationship management, and other capabilities. A security vulnerability exists in PeopleSoft Enterprise CS Campu...
XSS Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.
Anhui Kexun Education Equipment Co., Ltd. is a professional information technology integrated service provider specializing in computer software research and development, sales and service. XSS vulnerability exists in the Digital Campus Digital Campus Integrated Management System of Anhui Kexun...
File Upload Vulnerability in Integrated Digital Campus Management System
Founded in 2009, Anhui Kexun Education Equipment Group Co., Ltd. is a comprehensive service provider dedicated to the research, development, promotion and service of industry software. A file upload vulnerability exists in the Digital Campus Integrated Management System DCIMS, which can be...
Logic Flaw Vulnerability in Campus Information Management System of China Telecom Group Corporation Ltd.
China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A logic flaw exists in the Campus Information Management System CIMS of China Telecom Group Corporation, which can be exploited by an attacker to reset a user...
CVE-2020-21883
Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover...
CVE-2020-21883
Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover...
Cross site request forgery (csrf)
Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery CSRF vulnerability in /tools/network-trace, /listusers, /listbyod?usertype=raduser, /dhcpleases, /go?rid=202 in which a specially crafted HTTP request may reconfigure the device...
Command injection
Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover...
CVE-2020-21883
Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover...
CVE-2020-21883
Affected devices: Unibox U-50 2.4; UniBox Enterprise Series 2.4; UniBox Campus Series 2.4. Vulnerability: OS command injection in /tools/ping. Root cause/impact: The injection allows complete device takeover. Exploit details: Not provided in the supplied documents. Remediation: Not specified in t...
Indio Networks Unibox SMB 跨站请求伪造漏洞
Indio Networks Unibox SMB and others are a wireless Wi-Fi from Indio Networks India. A cross-site request forgery vulnerability exists in Unibox SMB version 2.4 and UniBox Enterprise Series version 2.4 and UniBox Campus Series version 2.4, which stems from a cross-site request forgery CSRF...
SQL Injection Vulnerability in Kexun Digital Campus Integrated Management System V1.0
Kexun Digital Campus Integrated Management System is a product that collects, processes, integrates, stores, transmits and applies campus information such as teaching, scientific research, management, technical service, life service, etc., based on digital information and network and established ...
Arbitrary File Read Vulnerability in Ruijie Campus Network Self-Service System
Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. An arbitrary file read vulnerability exists in Ruijie's campus network self-service system,...
SQL Injection Vulnerability in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co.
The Campus Payment Platform is developed by Beijing DIKE Farsighted Technology Co., Ltd. to solve various problems in payment of fees in colleges and universities, to reduce the workload of school financial managers, and to facilitate all kinds of fee-paying personnel both inside and outside the...
File Upload Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.
Digital campus is based on digital information and network, established on computer and network technology for the collection, processing, integration, storage, transmission and application of campus information on teaching, scientific research, management, technical services, life services, etc....