Ventem e-School 安全漏洞

Ventem e-School is a smart school platform from Feiyu Hi-Tech Ventem of Taiwan, China. A security vulnerability exists in Ventem e-School, which stems from a lack of authorization checking and could lead to elevated privileges...

SQL Injection Vulnerability in Website Building System of Ningbo Hi-Tech Zone Zhongyu Network Co.

Ningbo Hi-Tech Zone Zhongyu Network Co., Ltd. is a branding and website design service organization. A SQL injection vulnerability exists in the website building system of Ningbo Hi-Tech Zone Zhongyu Network Co. The vulnerability can be exploited by attackers to obtain sensitive information from...

SQL Injection Vulnerability in the Website Building System of Ningbo Hi-Tech Zone Aokai Network Technology Co.

Ningbo High-tech Zone Aokai Network Technology Co., Ltd. main service platforms and services are: Alibaba Integrity through the whole network operation, Alibaba International Station store decoration, SMTP store decoration, Taobao decoration, marketing Web site construction, display Web site...

SQL Injection Vulnerability in E-Tech Website Construction System of Yanji Pilot High-Tech Development Co.

Yanji Pioneer Hi-Tech Development Co., Ltd. is a modernized company of computer software, hardware development and network service, electronic technology application and development. Now it has developed "E-technology website construction software", "E-technology e-commerce", "E-technology office...

Mail.ru: Reflected XSS on hi-tech.mail.ru

XSS in https://hi-tech.mail.ru/ https://hi-tech.mail.ru/ is not currently in bug bounty scope...

Mail.ru: Flash XSS - http://hi-tech.mail.ru/

Hello, I found a Flash based XSS in http://hi-tech.mail.ru/ Vulnerable link : http://hi-tech.mail.ru/img/flash/audio-player.swf?playerID=a"catchealertdocument.domain// Tested on Mozilla Firefox and Google Chrome. Regards, Florin...