Shijiazhuang Cool Arts Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Shijiazhuang Cool Arts Network Technology Co., Ltd. is a marketing-oriented Internet enterprise specializing in engaging in corporate website construction. Shijiazhuang City Cool Arts Network Technology Co., Ltd. building system there are SQL injection vulnerabilities, attackers can use the...

Exploit for Expression Language Injection in Vmware Vcloud_Director

CVE-2020-3956 PoC exploit for VMware Cloud Dir...

Zhejiang Mufeng Website Technology Co., Ltd. website system SQL injection vulnerability

Zhejiang Mufeng Website Technology Co., Ltd. is an enterprise website building service company. Zhejiang Mufeng Website Technology Co., Ltd. station building system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

SQL Injection Vulnerability in Website Building System of Suzhou Tianxiao Network Technology Co.

Suzhou Tianxiao Network Technology Co., Ltd. is a company engaged in software development, network information services and management of office automation equipment. Suzhou Tianxiao Network Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be...

SQL Injection Vulnerability in li***.asp page of website building system of Nanjing Xubu Network Technology Co.

Nanjing Xubu Network Technology Co., Ltd. is an Internet solution provider. The system li.asp page of Nanjing Xubu Network Technology Co., Ltd. has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Online Car Rental Service System

Online car rental service system is an O2O service platform built based on car rental business scenarios. There is a SQL injection vulnerability in the Online Car Rental Service System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in the Website Building System of Tianze Culture Communication (Henan) Co.

Ltd. is a network service company that provides Internet network information services, engages in Internet value-added services, and provides enterprises with customized network solutions, website construction, network promotion and other services. There is a SQL injection vulnerability in the...

SQL Injection Vulnerability in the Website Building System of Hainan Creative Future Culture and Media Co.

Hainan Creative Future Culture Media Co., Ltd. is an excellent enterprise engaged in brand one-stop website construction services. Hainan Creative Future Culture Media Co., Ltd. station building system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitiv...

Hefei Tianxun Information Technology Co., Ltd. pushes Couponer CMS with SQL injection vulnerability

Push Couponer CMS is a completely free Taobao coupon website source code program. Ltd. Push Couponer CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability exists in kkcms (CNVD-2020-33127)

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information database...

Schneider Electric EcoStruxure Operator Terminal Expert SQL Injection Vulnerability

Schneider Electric EcoStruxure Operator Terminal Expert is a touch screen configuration software from Schneider Electric, France. This software branch is mainly used for creating and editing touch applications. A SQL injection vulnerability exists in the handling of VXDZ files in Schneider Electr...

SQL Injection Vulnerability in Stone Technology Online Exam System Frontend

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores...

SQL Injection Vulnerability in Employment Information Service Platform of Shanghai Jiading Information Technology Co.

Shanghai A-Ding Information Technology Co., Ltd. is focusing on college cloud employment information service platform products, adhering to the principle of saas, with many high-quality Internet resources as the basis, to establish employment information service cloud platform. Provide humanized,...

CVE-2020-12104

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation...

YouDianCMS suffers from SQL injection vulnerability (CNVD-2020-28103)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability, attackers can use the vulnerability to obtain databas...

HPE IMC ForwardRedirect Expression Language Injection

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the actionbean request parameter provided to the forwardredirect.xhtml endpoint...

Tongda OA suffers from SQL injection vulnerability (CNVD-2020-28123)

Tongda OA is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd, which is a comprehensive management and office platform combined with China's enterprise management practices. There is a SQL injection vulnerability in Tongda OA,...

Guangdong Century ICT Network Technology Co., Ltd Supervision Pass - Supervision Enterprise Comprehensive Business Management System suffers from SQL Injection Vulnerability

Supervision through - supervision enterprise integrated business management system, is the Guangdong Century ICT Network Technology Co., Ltd. for the domestic engineering consulting enterprises engineering supervision, project management, cost, bidding agency, project construction informatization...

HPE Intelligent Management Remote Rode Execution (CVE-2019-5386)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the class...

Sophos XG Firewall SFOS SQL Injection Vulnerability

Sophos XG firewall and SFOS are both products from Sophos UK.Sophos XG firewall is a next generation endpoint protection and enterprise firewall product.SFOS is an operating system for Sophos firewall products. An SQL injection vulnerability exists in SFOS on Sophos XG Firewall appliances...