CVE-2024-8163

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/filemanager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The...

CVE-2024-8163 Chengdu Everbrite Network Technology BeikeShop files destroyFiles path traversal

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/filemanager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The...

CVE-2024-8163 Chengdu Everbrite Network Technology BeikeShop files destroyFiles path traversal

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/filemanager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The...

Command Execution Vulnerability in NBR800G of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-40101)

The NBR800G is an enterprise-class router. A command execution vulnerability exists in the NBR800G of Beijing StarNet Ruijie Network Technology Co. that can be exploited by an attacker to gain server privileges...

SQL Injection Vulnerability in UFIDA U8+CRM of UFIDA Network Technology Co. Ltd (CNVD-2024-38489)

UFIDA U8+CRM is a management software designed specifically for the agency sales and service industry that integrates CRM, call center, and OA core applications and provides integrated applications for front-end marketing, back-end business processing, and employee management. A SQL injection...

Arbitrary file read vulnerability exists in NC Cloud of UFIDA Network Technology Corporation (CNVD-2024-37279)

NC Cloud is a large enterprise digitalization platform. An arbitrary file read vulnerability exists in UFIDA Network Technology Corporation NC Cloud, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Mobile System Management at UFIDA Network Technology Co.

UFIDA Network Technology Co., Ltd. is a company whose business scope includes technical development, technical consultation, technology transfer, technical service and technical training of electronic computer software, hardware and external equipment. An unauthorized access vulnerability exists ...

Command Execution Vulnerability in RG-UAC 6000-E50 of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-36581)

Beijing StarNet Ruijie Network Technology Co., Ltd. is an enterprise mainly engaged in software and information technology service industry. A command execution vulnerability exists in the RG-UAC 6000-E50 of Beijing StarNet Ruijie Network Technology Co. Ltd. that can be exploited by an attacker t...

Command Execution Vulnerability in UFIDA NC Cloud at UFIDA Network Technology Co.

UFIDA NC Cloud is a large-scale enterprise digitalization platform launched by UFIDA Network Technology Co. A command execution vulnerability exists in UFIDA NC Cloud, which can be exploited by an attacker to execute arbitrary commands...

SQL Injection Vulnerability in e-cology 9 of Shanghai Panmicro Network Technology Co.

e-cology 9 is a large-scale collaborative management platform for enterprises. A SQL injection vulnerability exists in e-cology 9 of Shanghai Panmicro Network Technology Co. Under default configuration, an unauthorized attacker can exploit this vulnerability to execute arbitrary SQL statements,...

Command Execution Vulnerability in YonBIP of UFIDA Network Technology Corporation (CNVD-2024-34828)

YonBIP is a converged service group with the basic product form of digital intelligence platform + scene services in ten fields + large-scale ecology. A command execution vulnerability exists in YonBIP of UFIDA Network Technology Corporation, which can be exploited by an attacker to execute...

Command Execution Vulnerability in RG-UAC 6000-E50 of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-34609)

The RG-UAC 6000-E50 is an online behavior management device. A command execution vulnerability exists in the RG-UAC 6000-E50 of Beijing StarNet Ruijie Network Technology Co. Ltd, which can be exploited by an attacker to gain control of a server...

Command Execution Vulnerability in RG-UAC Ruijie Unified Internet Behavior Management and Audit System of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-32517)

Beijing StarNet Ruijie Network Technology Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage and so on. A command execution vulnerability exists ...

SQL Injection Vulnerability in UFIDA NC of UFIDA Network Technology Co. Ltd (CNVD-2024-31573)

UFIDA NC is a large erp enterprise management system and e-commerce platform. A SQL injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive database information...

Exploit for SQL Injection in Crmeb

CVE-2024-36837 / CNVD-2024-30128 POC write URL in url.txt and...

SQL Injection Vulnerability in UFIDA NC of UFIDA Network Technology Co. Ltd (CNVD-2024-30550)

UFIDA NC is a large erp enterprise management system and e-commerce platform. A SQL injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2024-29454)

NC Cloud is a large enterprise digitalization platform. A SQL injection vulnerability exists in UFIDA Network Technology Corporation NC Cloud, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in NC Cloud of UFIDA Network Technology Co.

NC Cloud is a large enterprise digitalization platform that supports flexible deployment models of public, hybrid and proprietary clouds. A SQL injection vulnerability exists in NC Cloud of UFIDA Network Technology Corporation, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in NBR6135-E at Beijing StarNet Ruijie Network Technology Co.

The NBR6135-E is a router. A command execution vulnerability exists in the NBR6135-E of Beijing StarNet Ruijie Network Technology Co. that can be exploited by an attacker to execute commands...

Command Execution Vulnerability in NBR6210-E of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-26904)

The NBR6210-E is a router product. A command execution vulnerability exists in the NBR6210-E of Beijing StarNet Ruijie Network Technology Co. that can be exploited by an attacker to gain control of a server...