SQL Injection Vulnerability in the Frontend of Zibo Shining Network Technology Co.

Zibo Shining Network Technology Co., Ltd. enterprise station building system is a specialized solution for enterprise station building products. Zibo Shining Network Technology Co., Ltd. enterprise website building system foreground there is a SQL injection vulnerability, attackers can use the...

Multiple SQL Injection Vulnerabilities in DM Enterprise Website System Backend

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM enterprise website building system background there are multiple SQL injection vulnerabilities. Attackers can use the vulnerability to...

File Upload Vulnerability on Scarecrow Enterprise Site (CNVD-2020-27175)

Scarecrow Enterprise Station based on PHP + Sqlite/MySQL open source simple and compact free enterprise website system. Scarecrow Enterprise Station has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in LJCMS

LJCMS is a PHP+MYSQL based, free and open source enterprise website system. LJCMS has a command execution vulnerability that can be exploited by attackers to gain server privileges...

File Upload Vulnerability in Enterprise Website Building System of Zibo Shining Network Technology Co.

Zibo Shining Network Technology Co., Ltd. enterprise station-building system a specialized enterprise station-building solutions for the product. There is a file upload vulnerability in the Zibo Shining Network Technology Co., Ltd. system that can be exploited by an attacker to gain access to the...

ESPCMS suffers from CSRF vulnerability

ESPCMS is an enterprise website management system built on LAMP development. ESPCMS suffers from a CSRF vulnerability. An attacker can exploit this vulnerability to forge administrator requests and perform unauthorized operations...

信游科技页游平台程序通用型SQL注入漏洞

简要描述： 某页游平台通用型SQL注入漏洞，可直接提权服务器，涉及页游平台数十个。全是企业站点，涉及资金交易。 详细说明： 今天是我第一次用sqlmap，没钱买电脑，也装不了backtrack 存在漏洞站点：http://www.52xinyou.cn/anli.htm 都在这个客户案例里面，17188不存在这个页面的漏洞。但是我不保证其他页面不存在。 本次渗透测试站点：http://www.teiyi.com/，对不起，让你受苦了。 sql注入地址：http://www.teiyi.com/payment/yeemobile.aspx?code=UNICOM 充值页面 直接sqlmap...

Internet Explorer help

None None...