dSPACE JSPUI 安全漏洞

dSPACE JSPUI is a digital resource storage and access interface system developed by the German company dSPACE. Version 6.5 of DSpace JSPUI contains a security vulnerability, which stems from improper handling of user input for the filtertype1 parameter. This vulnerability may lead to reflective...

Arbitrary File Deletion Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. Ltd (CNVD-2021-51296)

Guangzhou Tutron Computer Software Development Co., Ltd. is the leader of all kinds of library service systemization construction software, is a high-tech enterprise integrating consulting service, product development, application integration, digital resource service, form design and technical...

SQL Injection Vulnerability in Guangzhou Tutron interlib Library Cluster Management System

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. There i...

Logic flaw vulnerability in interlib library cluster management system

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. There i...

SQL Injection Vulnerability in CCTV Digital Resource Teaching Platform

CCTV digital resource teaching platform is to provide users with online teaching services. SQL injection vulnerability exists in CCTF Digital Resource Teaching Platform. An attacker can exploit the vulnerability to log in to the account system and obtain sensitive information from the database...

方正阿帕比数字资源平台系统多处漏洞打包-可拖库-可getshell-可获取系统权限（通用 多案例）

简要描述： 乌云是目前最大的漏洞平台，只要你知道的系统、网站，它们的漏洞都可以从乌云上找到，所以乌云的漏洞库是一笔无形的巨大财富 详细说明： Apabi数字资源平台系统是一个用户量很大的图书馆系统 涉及网站太多为图书馆、学校等教育机构，甚至地方人社局等，而绝大部分服务器都不是单一的运行着这一套系统...真是个好“邻居”... None 漏洞证明： 漏洞证明在上面详细说明里已足够、拿下webshell后在99.9%均可获取到系统权限，进入远程桌面任意操作。这里就不证明了，并无深入！...