6676 matches found
SQL injection vulnerability in the ID parameter of the GG.aspx page of the Quality Supervision Station Comprehensive Information Service Platform of Zhuhai Xinhua Tong Software Co.
ZHXHT Supervision and Regulation Comprehensive Service Platform is a comprehensive platform integrating engineering supervision, testing supervision, commercial mixing supervision, web portal, commercial mixing quality networking supervision, credit rating, OA office, SMS system, wireless...
SQL Injection Vulnerability in Showgg.asp Page ID Parameter of Chengdu Yilian Government Website System
Chengdu Yilian Government Website System is a portal website for government courts and other users developed by . There is a SQL injection vulnerability in this product, the vulnerability URL is:/Showgg.asp?ID=,cookie injection, the injection parameter is ID, the attacker can use the vulnerabilit...
SQL Injection Vulnerability in Showarticles.asp Page ID Parameter of Chengdu Yilian Government Website Building System
Chengdu Yilian government website building system is a portal website for government courts and other users developed by . There is a SQL injection vulnerability in this product, the vulnerability URL is: /Showarticles.asp?ID=,cookie injection, the injection parameter is ID, the attacker can use...
SQL Injection Vulnerability in the mail_ID Parameter in the mail.do of Fuzhou Tranda Special Equipment Safety Monitoring System
Fuzhou Chuangda special equipment safety monitoring system using B / S structure, the use of J2EE for development, the system can run on any operating system platform, running into the server and client operation, the server runs the corresponding WEB APPLICATION services such as: TOMCAT, JBOSS,...
SQL Injection Vulnerability in the id Parameter of Nanchangwei.com Electronic Newspaper System
"VNN Digital Newspaper" is a professional software product for digitizing newspapers, which can provide a perfect solution for paper newspapers to go online. It allows the original newspaper layout to be quickly and easily presented to readers through the Internet. There exists a SQL injection...
SQL injection vulnerability in the info_id parameter of PlacardView.aspx page of OA system of Shanghai Shuang Yang Computer Hi-Tech Development Co.
Shanghai Shuang Yang Computer Hi-Tech Development Company Shuang Yang for short is a high-tech enterprise mainly engaged in application software development and system integration. The product /DSOATY/FromBaoShan/LaborSpecial/PlacardView.aspx?infoid=1 at the existence of SQL injection...
SQL Injection Vulnerability in the id Parameter of Nanchangwei.com Electronic Newspaper System
Vnet Digital Newspaper" is a professional software product to digitize newspapers, which can provide a perfect solution for paper newspapers to go online. A SQL injection vulnerability exists in the id parameter of Nanchang WiNET Digital Newspaper System. An attacker can exploit the vulnerability...
Generalized SQL Injection Vulnerability in BlueLine Intelligent Collaboration Platform of Shenzhen Weida Software Co.
Shenzhen Lanling Software Co., Ltd. is the first enterprise in China to research knowledge management and promote the construction of knowledge-based platform to provide solutions for customers. A SQL injection vulnerability exists in the EIS of the BlueLine Intelligent Collaboration Platform...
WordPress plugin Google Maps 'id' parameter cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Google Maps 'id' parameter due to the...
Arbitrary File Download Vulnerability in ZTE ZXECS EBG2800
The ZXECS EBG2800 is a converged communications product that integrates data, voice, security, behavior management and rich value-added business applications into a single system, providing a variety of functions required by enterprises in a modular format. An arbitrary file download vulnerabilit...
Mediaone 'id' Parameter SQL Injection Vulnerability
MediaOne is a multi-window fusion controller of the famous American company dVision. The advantage of this multi-window fusion controller called picture splicer in China is that it integrates multi-window picture-in-picture function, image edge fusion and surface geometric correction function, an...
Huge-IT Slideshow Cross-Site Scripting Vulnerability
Huge-IT Slideshow is an extension developed by the Huge-IT team for use in Joomla! to attract visitors by improving the style and character of your website. Huge-IT Slideshow v1.0.4 in . /views/slideshow/tmpl/default.php file is vulnerable to cross-site scripting. The vulnerability can be exploit...
Sql injection
Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the 1 ID or 2 Branch parameter...
Uber: SQL Injection on sctrack.email.uber.com.cn
Hi, Uber Security team I just traveled to China, when I call Uber in China. I received an advertisement mail from Uber and I found the unsubscribe link is different from the original unsubscribe link, and there is a SQL Injection under the unsubscribe link. You can see where to find the unsubscri...
The vulnerability of the Linux operating system, which allows a malicious individual to increase their privileges
A local user can increase their privileges by passing a parameter vcpuid with a high value...
Farmers-government system jwhxq. aspx parameter id SQL injection vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.api.request import req from pocsuite.api.poc import register from pocsuite.api.poc import Output, POCBase import re class TestPOCPOCBase: vulID = '1' ssvid version = '1.0' author = 'kikay' vulDate = '2015-03-04'...
CVE-2016-4309
Session fixation vulnerability in Symphony CMS 2.6.7, when session.useonlycookies is disabled, allows remote attackers to hijack web sessions via the PHPSESSID parameter...
Goku CRM /App/Lib/Action/UserAction.class.php user_id parameter SQL injection
No description provided by source...
Zhengzhou Rocky Electronic Technology Co., Ltd. 686 WeChat CPS distribution system id parameter has SQL injection vulnerability
686 WeChat CPS distribution system is a CPS advertising platform system that connects merchants and promoters, promoters, WeChat public platform traffic owners by registering on the platform to promote the goods released by the merchants, the goods sold to get commission. Zhengzhou Rocky Electron...