Ship 100 online education system has an arbitrary file download vulnerability

Shipping 100 is a virtual goods automatic shipping system / article pay to read system, without human guards, customers can buy online to automatically complete the transaction. There is an arbitrary file download vulnerability in the Shipment 100 online education system. An attacker can exploit...

SQL Injection Vulnerability in Online Education System of Zibo Shining Network Technology Co.

Zibo Shining Network Technology Co., Ltd. was established on November 06, 2014 . The company's business scope includes: the development and sale of computer software and hardware, Internet technology development, technical services, network information system integration, web design, network...

SQL Injection Vulnerability in Incu Online Education System (CNVD-2020-67120)

Incu online education system is the Java version of the open source online school source code building system . SQL injection vulnerability exists in Incu Online Education System. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Incu Online Education System (CNVD-2020-67117)

Incu online education system is the Java version of the open source online school source code building system . SQL injection vulnerability exists in Incu Online Education System. Attackers can use the vulnerability to obtain sensitive information in the database...

Laboratory Safety Education and Examination System Has Logic Flaw Vulnerability

Tsinghua University Informatization Technology Center is established by Tsinghua University to undertake the operation service and construction development of the university's informatization infrastructure and to provide protection for the university's informatization construction and service. A...

Logic Flaw Vulnerability in Golden Intelligence Education Talent Acquisition System

Jinzhi Education Talent Recruitment System is a full-process management of online recruitment for colleges and universities. Candidates can submit their resumes through the network, and managers can screen and review resumes through the system. A logic flaw vulnerability exists in the Jinzhi...

SQL Injection Vulnerability in Backend System Messages of Incu Online Education System

Beijing IncuTimes Technology Co., Ltd "IncuTimes", founded in 2015, is a domestic educational products and technology service provider. A SQL injection vulnerability exists in the background system messages of Incu Online Education System. An attacker can exploit the vulnerability to obtain...

Logic Flaw Vulnerability in Online Education System of Beijing IncuTime Technology Co.

Beijing IncuTime Technology Co., Ltd. is a high-tech enterprise specializing in Internet online education platform. The online education system of Beijing IncuTime Technology Co., Ltd. has a logic flaw vulnerability, which can be exploited by an attacker to modify other people's information beyon...

Information Leakage Vulnerability in Incu Online Education System

Beijing IncuTimes Technology Co., Ltd "IncuTimes" is a domestic provider of educational products and technology services. An information leakage vulnerability exists in the online education system of Incu. An attacker can exploit the vulnerability to obtain sensitive information such as user...

Command Execution Vulnerability in ctcms 2.0.2 Backend

Chong Sheng Network Technology has developed Cscms Portal Content Management System, Ctcms Network Video Education Management System, Aggregate Payment, and a Multi-Merchant Entry Card Issuing Platform Management System. A command execution vulnerability exists in the ctcms 2.0.2 backend, which c...

SQL Injection Vulnerability in Zhirui School Course Selection System

Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System suffers from SQL...

SQL Injection Vulnerability in Road Transportation Driver Continuing Education Management System at Multiple Provincial and Municipal Levels

A SQL injection vulnerability exists in the road transportation driver continuing education management system at multiple provincial and municipal levels. An attacker could exploit the vulnerability to obtain sensitive information in the database...

ThreatList: Fewer Big DDoS Attacks in Q3, Overall Rate Holds Steady

When it comes to distributed denial of service DDoS attacks, the third quarter of 2018 marked an apparent lull in the action, with fewer huge, multi-day attacks than in previous quarters. Researchers however warn against having a false sense of security: The total number of attacks in the quarter...

OpenExpert 0.5.17 Cross Site Scripting

Title : Openexpert 0.5.17 - Cross Site Scripting Author: Nassim Asrir Author Company: Henceforth Tested on: Winxp sp3 - win7 Vendor: https://sourceforge.net/projects/law-expert/ Download Software: https://sourceforge.net/projects/law-expert/files/ About The Product : OpenExpert. Dual use Web base...

Struts2 Remote Command Execution Vulnerability in Shenzhen Pengjiao Project Management System

Shenzhen Pengjiao Project Management System is a product of Shenzhen Pengjiao Management Consultant Co., Ltd, which mainly serves primary and secondary schools, private educational institutions, government education and so on. A Struts2 remote command execution vulnerability exists in the Shenzhe...

SQL injection vulnerability exists in the page /target/lres/message/index.html?t_id=116 of the generic reader education system of Nanjing Oncor Technology Co.

Nanjing Oncor Technology Co., Ltd Esmay Reader Education System is a set of library reader education system. A SQL injection vulnerability exists in the page /target/lres/message/index.html?tid=116 of the general-purpose reader education system of Nanjing ONC Technology Co. An attacker can remote...

Generalized Reader Education System/target/lres/study/datumdownload.html?type_id=3 page with SQL injection vulnerability of Nanjing Oncor Technology Co.

Nanjing Oncor Technology Co., Ltd Esmay Reader Education System is a set of library reader education system. The system/target/lres/study/datumdownload.html?typeid=3 page has a SQL injection vulnerability. An attacker can remotely exploit the vulnerability to obtain sensitive database information...

English Fu the education system /VJ/PublicModule/MessageManage/Iframe_StuSend. aspx file pid parameter SQL injection vulnerability

No description provided by source...

SQL injection vulnerability in the XH parameter of the student/XJB1.asp page of the informatization management system of Guangzhou Zhongda Dongri Education Technology Co.

Guangzhou Zhongda Dongri Education Technology Co., Ltd. education information management system is to provide an integrated campus information solution. A SQL injection vulnerability exists in the informatization management system of Guangzhou CUHK Dongri Education Technology Co. The lack of...

SQL injection vulnerability in the xh parameter of the student/BookIndex.asp page of the informatization management system of Guangzhou Zhongda Dongri Education Technology Co.

Guangzhou Zhongda Dongri Education Technology Co., Ltd. education information management system is to provide an integrated campus information solution. A SQL injection vulnerability exists in the informatization management system of Guangzhou CUHK Dongri Education Technology Co. The lack of...