Interest rate can be gamed

Lines of code Vulnerability details Impact A lender may borrow to increase interest rate, and as such game the bank. Proof of Concept Suppose a lender borrows half of the amount he has lent. If by doing so he increases the utilization such that the interest rate more than doubles which may be...

SQL Injection Vulnerability in elib, the Book Lending Management System of Qixing Company (CNVD-2020-73421)

Qixing book lending system is a book lending management system, including the front and back office management system, the system uses ASP.NET language development. There is a SQL injection vulnerability in elib, which can be exploited by attackers to obtain sensitive information from the databas...

SQL Injection Vulnerability in Qixing Company's Book Lending Management System elib

Qixing Attendance System is a system for book lending management, including front and backend management system, which is developed using ASP.NET language. There is a SQL injection vulnerability in elib, the book lending management system of Qixing Company, which can be exploited by attackers to...

SQL Injection Vulnerability in elib, the Book Lending Management System of Qixing Company (CNVD-2020-72444)

Qixing book lending system is a book lending management system, including the front and back office management system, the system uses ASP.NET language development. There is a SQL injection vulnerability in elib, which can be exploited by attackers to obtain sensitive information from the databas...

SQL Injection Vulnerability in elib, the Book Lending Management System of Qixing Company (CNVD-2020-72445)

Qixing book lending system is a book lending management system, including the front and back office management system, the system uses ASP.NET language development. There is a SQL injection vulnerability in elib, which can be exploited by attackers to obtain sensitive information from the databas...

SQL Injection Vulnerability in Diyou p2p Lending System V4.1

Diyou P2P lending system is a cloud-based p2p lending system, p2p lending program software and online financial investment system. A SQL injection vulnerability exists in emperor friend p2p lending system V4.1, the vulnerability is due to the program failing to effectively filter the data submitt...

帝友P2P借贷系统SQL注入通杀#1

简要描述： =。= 详细说明： 模块：省市信息联动插件（通杀V4.0,3.1） 基于后台读数据库出数据的省市信息联动插件，省市区变量直接转int即可！ Location:./?plugins&q=areas&areaid=174 http://www.diyou.cc/?plugins&q=areas&areaid=174 GET参数areaid未有效过滤导致存在注入 通知存在注入点，未做进一步测试，赶紧赶紧赶紧修复！ python sqlmap.py -u "http://www.diyou.cc/?plugins&q=areas&areaid=174" -p "areaid"...