File Upload Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. Ltd (CNVD-2021-52386)

Ltd. is a high-tech enterprise integrating product research and development, application integration and customer service, with the main goal of providing high-quality application software system design, integration and maintenance services for users in the library industry. There is a file uploa...

Logic flaw vulnerability in PHPOK of Shenzhen Kunshuo Technology Co. Ltd (CNVD-2021-51497)

PHPOK is a set of popular enterprise website construction system written in PHP language and MySQL database. Ltd. PHPOK has a logic flaw vulnerability that can be exploited by attackers to gain control of the server...

SQL Injection Vulnerability in interlib Library Cluster Management System

Guangzhou Tutron Computer Software Development Co., Ltd. is a high-tech enterprise integrating product development, application integration and customer service. A SQL injection vulnerability exists in the interlib library cluster management system, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Quality Tracing System of Heilongjiang Ligao Technology Co.

Heilongjiang Ligao Technology Co., Ltd. is a company that provides safe food production and quality control solutions for food companies. A SQL injection vulnerability exists in the quality traceability system of Heilongjiang Ligao Technology Co. Ltd, which can be exploited by attackers to obtain...

County-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co., Ltd. suffers from unauthorized access vulnerability

Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...

Command Execution Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks (CNVD-2021-51332)

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. A command execution vulnerability exists in the PatrolFlow multi-service security gateway intelligent management platform of Byzoro Networks, which can be exploited by...

Ltd. T83-CV102 Entrance and Exit License Plate Recognition HD Network Integrated Camera with Weak Password Vulnerability

Ltd. is China's leading R&D and manufacturer of intelligent terminal equipment for intelligent parking. Shenzhen Qianhai Huaxia Zhixin Data Technology Co., Ltd T83-CV102 Entrance and Exit License Plate Recognition HD Network Integrated Camera has a weak password vulnerability, which can be...

File upload vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co.

Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...

Weak Password Vulnerability in Huawei Eudemon200E Series Firewalls

Huawei Technologies Co., Ltd. is a leading global information and communications technology ICT solutions provider. A weak password vulnerability exists in Huawei Eudemon200E series firewalls, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in SINDOH A601_A606 at SINDOH (Qingdao) Office Systems Co.

Xindu Qingdao Office System Co., Ltd. is a professional office equipment enterprise integrating research and development, production, sales and after-sales service. SINDOH A601A606 of SINDOH Qingdao Office Systems Co., Ltd. has an unauthorized access vulnerability, which can be exploited by an...

Arbitrary File Download Vulnerability in NSYS Netnifty Second Generation Firewall of Shenzhen Netnifty Technology Co.

NSYS ACF, the second-generation firewall, is a new network security appliance designed for the application layer, capable of accurately identifying users, applications and content, with complete security protection capabilities, and able to comprehensively replace traditional firewalls with stron...

Arbitrary File Download Vulnerability in iOffice Hospital Edition

hereinafter referred to as: Redfan Technology is one of the top ten military industrial groups - China State Shipbuilding Corporation under the Guangzhou Shipbuilding International Company Limited Holdings of high-tech enterprises. iOffice Hospital Edition exists arbitrary file download...

Shijiazhuang Hejia Technology Co., Ltd. dynamic ring monitoring system has information leakage vulnerability

Shijiazhuang Hejia Technology Co., Ltd. is a high-tech enterprise specializing in the development and application of computer room environment and power equipment monitoring system products. Shijiazhuang Hejia Technology Co., Ltd. dynamic ring monitoring system information leakage vulnerability,...

Weak Password Vulnerability in MTS Transcoding Server of Suzhou Kodak Technology Co.

Ltd. is a leading provider of video and security products and solutions, committed to video conferencing, video surveillance and a wealth of video application solutions to help all kinds of government and enterprise customers to solve the visual communication and management challenges. A weak...

File Upload Vulnerability in the Switch Centralized Management Platform of Shenzhen VMware Technology Co.

Ltd. is a network total solution and smart home solution provider. A file upload vulnerability exists in the switch centralized management platform of Shenzhen WML Technology Co. Ltd. that can be exploited by an attacker to upload a webshell and gain server privileges...

Binary Vulnerability in R818 of Zhuhai Allwinner Technology Co. Ltd (CNVD-2021-49173)

The R818 is a quad-core intelligent voice with screen chip. A binary vulnerability exists in the R818 of Zhuhai Allwinner Technology Company Limited, which can be exploited by attackers to cause a denial of service...

Sql injection

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...

CVE-2020-21394

The CVE-2020-21394 entry applies to Zhongbang CRMEB Mall System (open source) v2.60 and v3.1, where SQL injection is possible through the tablename parameter in SystemDatabackup.php. The underlying issue is a SQL injection vulnerability that can lead to unauthorized SQL commands with high impact ...

CVE-2020-21394

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...

Binary Vulnerability in WPS Office of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2021-49105)

WPS Office is the office software produced by Kingsoft Office Software, which can realize the text, forms, presentations and other functions commonly used in office software. A binary vulnerability exists in WPS Office by Kingsoft Office Software Zhuhai Limited, which can be exploited by attacker...