591 matches found
Logic Flaw Vulnerability in Campus Information Management System of China Telecom Group Corporation Ltd.
China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A logic flaw exists in the Campus Information Management System CIMS of China Telecom Group Corporation, which can be exploited by an attacker to reset a user...
CVE-2020-21883
Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover...
CVE-2020-21883
Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover...
Command injection
Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover...
Cross site request forgery (csrf)
Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery CSRF vulnerability in /tools/network-trace, /listusers, /listbyod?usertype=raduser, /dhcpleases, /go?rid=202 in which a specially crafted HTTP request may reconfigure the device...
CVE-2020-21883
Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover...
CVE-2020-21883
Affected devices: Unibox U-50 2.4; UniBox Enterprise Series 2.4; UniBox Campus Series 2.4. Vulnerability: OS command injection in /tools/ping. Root cause/impact: The injection allows complete device takeover. Exploit details: Not provided in the supplied documents. Remediation: Not specified in t...
SQL Injection Vulnerability in Kexun Digital Campus Integrated Management System V1.0
Kexun Digital Campus Integrated Management System is a product that collects, processes, integrates, stores, transmits and applies campus information such as teaching, scientific research, management, technical service, life service, etc., based on digital information and network and established ...
Indio Networks Unibox SMB 跨站请求伪造漏洞
Indio Networks Unibox SMB and others are a wireless Wi-Fi from Indio Networks India. A cross-site request forgery vulnerability exists in Unibox SMB version 2.4 and UniBox Enterprise Series version 2.4 and UniBox Campus Series version 2.4, which stems from a cross-site request forgery CSRF...
Arbitrary File Read Vulnerability in Ruijie Campus Network Self-Service System
Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. An arbitrary file read vulnerability exists in Ruijie's campus network self-service system,...
SQL Injection Vulnerability in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co.
The Campus Payment Platform is developed by Beijing DIKE Farsighted Technology Co., Ltd. to solve various problems in payment of fees in colleges and universities, to reduce the workload of school financial managers, and to facilitate all kinds of fee-paying personnel both inside and outside the...
File Upload Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.
Digital campus is based on digital information and network, established on computer and network technology for the collection, processing, integration, storage, transmission and application of campus information on teaching, scientific research, management, technical services, life services, etc....
Unibox 2.4 CSRF / Remote Code Execution
===================================================== Authenticated Remote Code Execution In Unibox 2.4 ===================================================== . contents:: Table Of Content Overview ======== Title:- Authenticated command execution in all UNIBOX WiFi Hotspot Controller. CVE ID:- Not...
File Upload Vulnerability in AIC Smart Campus System of Hainan Wings Wisdom Information Technology Co.
Hainan Wings Wisdom Information Technology Co., Ltd hereinafter referred to as "Wings Wisdom" was founded in May 2017, with a registered capital of 10 million yuan, is an enterprise specializing in consulting, planning, construction and services in the field of information technology in higher...
DLL Hijacking Vulnerability in Tianyi Campus Network Client
Sky Campus Network Client is a campus broadband connection tool for students. A DLL hijacking vulnerability exists in Tianyi Campus Network Client, which can be exploited by attackers to gain server control privileges...
Information Leakage Vulnerability in Numtech Mobile Campus WEB System
Ltd. is a development service provider dedicated to smart campus, and its main products include Moe School, Fusion Media Platform, Communication Platform, and so on. An information leakage vulnerability exists in the WEB system of Numtech Mobile Campus. Attackers can use the vulnerability to obta...
Chengdu Enable Technology Co., Ltd Vocational College Smart Campus Platform Has Logic Flaw Vulnerability
Chengdu Enable Technology Co., Ltd. is a high-tech enterprise and software enterprise in education informatization industry. A logic flaw vulnerability exists in the Vocational College Smart Campus Platform of Chengdu Enable Technology Co. An attacker can exploit the vulnerability to cause all...
Chengdu Enable Technology Co., Ltd. Enable Smart Campus Platform Has Logic Flaw Vulnerability
Chengdu Enable Technology Co., Ltd. is a high-tech enterprise and software enterprise in education informatization industry. A logic flaw vulnerability exists in the Enable Smart Campus platform of Chengdu Enable Technology Co. An attacker can exploit the vulnerability to cause all sites using th...
campusvirtual.uaemex.mx Cross Site Scripting vulnerability OBB-1442700
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unauthorized Access Vulnerability in YN Smart Campus of Chengdu Enable Technology Co.
Chengdu Enable Technology Co., Ltd. is a high-tech enterprise and software enterprise in education informatization industry. Chengdu Enable Technology Co., Ltd YN Smart Campus has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...