CVE-2020-21394

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...

Sql injection

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...

CVE-2020-21394

The CVE-2020-21394 entry applies to Zhongbang CRMEB Mall System (open source) v2.60 and v3.1, where SQL injection is possible through the tablename parameter in SystemDatabackup.php. The underlying issue is a SQL injection vulnerability that can lead to unauthorized SQL commands with high impact ...

CVE-2020-21394

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...

Binary Vulnerability in OFD Version Reader of Beijing Numerical Network Technology Limited Liability Company (CNVD-2021-49108)

OFD plate reader is a plate reader product based on our own OFD standard. There is a binary vulnerability in OFD Edition Reader of Beijing Numerical Network Technology Co., Ltd. that can be exploited by attackers to cause the program to crash...

Unauthorized Access Vulnerability in ESearch of Shanghai Panavision Networks Technology Co.

Ltd. is a company focusing on the field of collaborative management software to help organizations build a unified digital office platform. Ltd. ESearch suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

Binary Vulnerability in WPS Office of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2021-49105)

WPS Office is the office software produced by Kingsoft Office Software, which can realize the text, forms, presentations and other functions commonly used in office software. A binary vulnerability exists in WPS Office by Kingsoft Office Software Zhuhai Limited, which can be exploited by attacker...

Unauthorized Access Vulnerability in the Flash Flood Monitoring and Early Warning Distribution System of Fujian SiChuang Software Co. Ltd (CNVD-2021-50614)

Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. An unauthorized access vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Fujian Sichuang Software Co. Ltd, which can...

Binary Vulnerability in OFD Version Reader of Beijing Numerical Network Technology Limited Liability Company (CNVD-2021-49112)

OFD plate reader is a plate reader product based on our own OFD standard. There is a binary vulnerability in OFD Edition Reader of Beijing Numerical Network Technology Co., Ltd. that can be exploited by attackers to cause the program to crash...

Arbitrary File Read Vulnerability in MyCnCart of Qingdao All-in-One Network Technology Co.

MyCnCart MCC for short is a free, open source B2C, B2B e-commerce platform system developed for the Chinese mainland market. MyCnCart has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in the Flash Flood Monitoring and Early Warning Distribution System of Fujian SiChuang Software Co. Ltd (CNVD-2021-50615)

Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. An unauthorized access vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Fujian Sichuang Software Co. Ltd, which can...

Command Execution Vulnerability in TongWeb Management Console

TongWeb is an application server from Beijing Orientop Technology Co. A command execution vulnerability exists in the TongWeb management console that can be exploited by an attacker to execute illegal commands...

Unauthorized Access Vulnerability in Xindu Ltd D430

Not satisfied with the history of being the earliest manufacturer of copiers and fax machines in Korea, Sindo Co., Ltd. strives to be the world's best solution partner. An unauthorized access vulnerability exists in the Xindo Ltd D430, which can be exploited by an attacker to gain unauthorized...

Command Execution Vulnerability in NBR6210-E of Beijing StarNet Ruijie Network Technology Co.

The NBR6210-E is an enterprise router from Ruijie Networks Co. A command execution vulnerability exists in the NBR6210-E of Beijing StarNet Ruijie Network Technology Co. that can be exploited by an attacker to execute arbitrary commands...

Command Execution Vulnerability in SD-WAN of Beijing Tianchi Network Co.

Skychase Networks is a value-added telecom service provider in China. A command execution vulnerability exists in the SD-WAN of Beijing Tianchi Network Co. Ltd. that can be exploited by an attacker to gain control of a server...

Weak Password Vulnerability in Network Video Server of Shenzhen Longchamp Xintron Technology Co.

Shenzhen Longchamp Xintron Technology Co., Ltd. is a leading intelligent service robot solution provider in China. Ltd. Network Video Server has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Information Leakage Vulnerability in Jinpan Software's Refined Management Platform

Beijing Jinpan Pengtu Software Technology Co., Ltd. was founded in 1995, is specializing in library information automation product development, promotion and application and system maintenance of high-tech enterprises. There is an information leakage vulnerability in Jinpan Software Refinement...

Unauthorized Access Vulnerability in Online Fingerprint Time and Attendance System of Beijing Zhongcheng Technology Development Co.

Ltd. is a company in the field of time safety management, venture capital, green agriculture, mining extraction and OEM production. An unauthorized access vulnerability exists in the online fingerprint time and attendance system of Beijing Zhongguancun Technology Development Co. Ltd, which can be...

SQL injection vulnerability in website building system of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is a marketing plan, providing medium and high-end website design, graphic design, program development and network marketing and with Suzhou Topps Network Technology Co. Suzhou Ernst Network Technology Co., Ltd. building system there are SQL injection...

Weak Password Vulnerability in MX-M316N of Sharp Trading (China) Co.

Sharp Trading China Co., Ltd. is a foreign enterprise that distributes and wholesales household appliances, LCD TVs, air conditioners, cell phones, printers and other products. A weak password vulnerability exists in Sharp Trading China Co. MX-M316N, which can be exploited by attackers to obtain...