SQL Injection Vulnerability in Kotto's Fully Intelligent Parking Video Charging System (CNVD-2021-11044)

Xiamen KTO Communication Technology Co., Ltd. is a static transportation system solution provider. A SQL injection vulnerability exists in the KETO Fully Intelligent Parking Video Charging System. An attacker can exploit the vulnerability to obtain sensitive database information...

Catalog Traversal Vulnerability in KTO's Fully Intelligent Parking Video Charging System

Xiamen KTO Communication Technology Co., Ltd. is an enterprise dedicated to developing and providing intelligent parking lot application solutions, and its business includes all-video intelligent parking lot solutions, diversified parking lot parking space guidance solutions and so on. A director...

Vehicle Parking Management System Authentication Bypass Vulnerability

Vehicle Parking Management System is a PHP + MySQL based parking management system. An authentication bypass vulnerability exists in Vehicle Parking Management System 1.0. The vulnerability can be exploited to bypass authentication via "Username: admin' && Password: Write Something"...

CVE-2020-23936

PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin' && Password: Write Something"...

CVE-2020-23936

PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin' && Password: Write Something"...

CVE-2020-23936

CVE-2020-23936 affects PHPGurukul Vehicle Parking Management System 1.0. Affected component: login/authentication; root cause described in connected PT-2020-15602 as an authentication bypass obtainable by using Username: admin'# and any Password. No other technical details on the underlying flaw ...

CVE-2020-23936

PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin' && Password: Write Something"...

PT-2020-15602 · Phpgurukul · Phpgurukul Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.0 Description: The issue allows for authentication bypass. An attacker can exploit this by using a specific combination of username and password, such as 'admin' for the username and any...

Logic flaws exist in the parking lot fee management system of Xiamen KTO Communication Technology Co.

Xiamen KTO Communication Technology Co., Ltd. is a professional smart parking value operator, providing safe, efficient, convenient and reliable smart parking services to customers worldwide. A logic flaw vulnerability exists in the parking fee management system of Xiamen KTO Communication...

Unauthorized Access Vulnerability in Intelligent Parking Cloud Charging System of Chongqing Tedi Technology Co.

Chongqing Tedi Technology Co., Ltd. leads the development and construction of intelligent community cloud platform, to create a cloud community service platform based on the integration of webpage + WeChat + APP, centralized management and control of community intelligent equipment, including...

File Upload Vulnerability in Smart Garage License Plate Recognition Machines

Shenzhen Fuji Intelligent System Co., Ltd. is a supplier of intelligent entrance/exit management equipment and a professional supplier of intelligent eco-environmental solutions. There is a file upload vulnerability in the Smart Parking License Plate Recognition Machine, which can be exploited by...

SQL Injection Vulnerability in KTO's Fully Intelligent Parking Video Charging System

Xiamen KTO Communication Technology Co., Ltd. is a static transportation system solution provider. A SQL injection vulnerability exists in the KETO Fully Intelligent Parking Video Charging System. An attacker can exploit the vulnerability to obtain sensitive database information...

airport-parking.focus.tv Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1029514 Security Researcher devl00p Helped patch 2703 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting airport-parking.focus.tv...

Chongqing Palm Pavilion Technology Co., Ltd Palm Pavilion App has information leakage vulnerability

Palm Pavilion APP is an internet parking service platform with real-time update of parking space information. App Palm Pavilion of Chongqing Palm Pavilion Technology Co., Ltd. has an information leakage vulnerability that can be exploited by attackers to obtain sensitive user information...

License Plate "NULL"

There was a DefCon talk by someone with the vanity plate "NULL." The California system assigned him every ticket with no license plate: $12,000. Although the initial $12,000-worth of fines were removed, the private company that administers the database didn't fix the issue and new NULL tickets ar...

Digital License Plates

They're a thing: Developers say digital plates utilize "advanced telematics" -- to collect tolls, pay for parking and send out Amber Alerts when a child is abducted. They also help recover stolen vehicles by changing the display to read "Stolen," thereby alerting everyone within eyeshot. This mak...

Why we shouldn’t use sequential booking references

I travel a lot with work. In the last 6 months there have only be 2 weeks where I haven’t been to Heathrow airport. Heathrow isn’t the easiest journey by public transport for me as the PTP HQ is in a field in north Bucks. Hence, I usually end driving to the airport. I’ve been to Heathrow twice th...

Schneider Electric EVLink Parking

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: EVLink Parking Vulnerabilities: Use of Hard-coded Credentials, Code Injection, SQL Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...

The vulnerability of the EVLink Parking software lies in the possibility of introducing code that allows a violator to increase their privileges.

The vulnerability of the EVLink Parking software is related to the possibility of code injection. Exploiting this vulnerability can allow a remote attacker to gain access with maximum privileges...

The vulnerability of the EVLink Parking software lies in its use of pre-installed credentials, allowing a violator to gain access to the device.

The vulnerability of the EVLink Parking software is related to the use of pre-set credentials. Exploiting this vulnerability could allow a remote attacker to gain access to the device...