CVE-2026-5538

A vulnerability was detected in QingdaoU OnlineJudge up to 1.6.1. Affected by this issue is the function serviceurl of the file JudgeServer.serviceurl of the component judgeserverheartbeat Endpoint. The manipulation results in server-side request forgery. It is possible to launch the attack...

CVE-2026-5538

CVE-2026-5538 affects QingdaoU OnlineJudge up to 1.6.1. The issue lies in the function service_url of JudgeServer.service_url within the judge_server_heartbeat Endpoint, where manipulation enables server-side request forgery. The vulnerability is exploitable remotely. The vendor has been contacte...

Logic Flaw Vulnerability in Dongsheng Booking Platform of Qingdao Dongsheng Weiye Software Co.

Qingdao Dongsheng Weiye Software Co., Ltd. is a company whose main business includes computer software development, network engineering design, web page design, integrated wiring, software technology services, installation and maintenance of electronic equipment and technical services, logistics...

Information leakage vulnerability in Dongsheng Logistics Software of Qingdao Dongsheng Weiye Software Co., Ltd (CNVD-2024-49053)

Dongsheng Logistics Software is a logistics management software integrating order management, warehouse management, transportation management and other functions of Qingdao Dongsheng Weiye Software Co. There is an information leakage vulnerability in Dongsheng Logistics Software of Qingdao...

SQL Injection Vulnerability in Dongsheng Logistics Software of Qingdao Dongsheng Weiye Software Co. Ltd (CNVD-2024-41183)

Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004, the company's main business scope for shipping logistics-related products and services. A SQL injection vulnerability exists in Qingdao Dongsheng Logistics Software, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Qingdao Hezheng Information Technology Co.

Qingdao Hezheng Information Technology Co., Ltd. is an enterprise mainly engaged in software and information technology service industry. A SQL injection vulnerability exists in Qingdao Hezheng Information Technology Co., Ltd's Jindouyun HKMP, which can be exploited by attackers to obtain sensiti...

Qingdao Aimi Cloud Software Co., Ltd. yueku enterprise network disk SQL injection vulnerability

Founded in 2015, Qingdao AmiCloud Software Co., Ltd. is a professional enterprise document management company, dedicated to enterprise document management web disk related technology research and development, resource integration, product promotion, project application and so on. Qingdao Aimi Clo...

Weak Password Vulnerability in Intelligent Building Integrated Management Platform of Qingdao Neusoft Carrier Intelligent Electronics Co.

Qingdao Neusoft Carrier Intelligent Electronics Co., Ltd. is a high-tech enterprise integrating R&D, production, office and life. Qingdao Neusoft Carrier Intelligent Electronics Co., Ltd. intelligent building integrated management platform has a weak password vulnerability, which can be exploited...

Unauthorized Access Vulnerability in SINDOH A601_A606 at SINDOH (Qingdao) Office Systems Co.

Xindu Qingdao Office System Co., Ltd. is a professional office equipment enterprise integrating research and development, production, sales and after-sales service. SINDOH A601A606 of SINDOH Qingdao Office Systems Co., Ltd. has an unauthorized access vulnerability, which can be exploited by an...

Arbitrary File Read Vulnerability in MyCnCart of Qingdao All-in-One Network Technology Co.

MyCnCart MCC for short is a free, open source B2C, B2B e-commerce platform system developed for the Chinese mainland market. MyCnCart has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in FUDECMS of Qingdao Fudek Network Technology Co.

Qingdao Fu Tak Network Technology Co., Ltd. specializes in website design and production, network marketing and promotion. There is a command execution vulnerability in FUDECMS of Qingdao Fu De Network Technology Co. Attackers can use this vulnerability to obtain server privileges...

Unauthorized Access Vulnerability in GLIS, the Integrated General Library Management System of Qingdao Xinyang (CNVD-2021-25893)

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

Qingdao Kechuang Internet Technology Co., Ltd. website building system suffers from sql injection vulnerability

Ltd. is a high-tech science and technology enterprise integrating software development, website construction, system integration, mobile APP development, mobile online shopping mall, and Internet application service. Qingdao Kechuang Internet Technology Co., Ltd. website construction system there...

SQL Injection Vulnerability in Dongsheng Logistics Software of Qingdao Dongsheng Weiye Software Co. Ltd (CNVD-2021-08485)

Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004, the company's main business expanded into three major segments, namely, logistics consulting, logistics information platform and logistics software. A SQL injection vulnerability exists in Qingdao Dongsheng Weiye Software Co...

Qingdao Dongsheng Weiye Software Co., Ltd. information leakage vulnerability in Dongsheng logistics software

Qingdao Dongsheng Weiye Software Technology Co., Ltd. was founded in November 2004, the company's main business expanded into three major segments, namely, logistics consulting, logistics information platform, logistics software. There is an information leakage vulnerability in Qingdao Dongsheng...

SQL Injection Vulnerability in Dongsheng Logistics Software of Qingdao Dongsheng Weiye Software Co. Ltd (CNVD-2021-08484)

Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004, the company's main business expanded into three major segments, namely, logistics consulting, logistics information platform and logistics software. A SQL injection vulnerability exists in Qingdao Dongsheng Weiye Software Co...

SQL Injection Vulnerability in Qingdao Shangzhixin Network Technology Co.

Ltd. was established in March 2001 in Qingdao, long-term service in the information technology and electronic industry at the forefront of high-tech positions, specializing in e-commerce, website production and maintenance and database development. There is a SQL injection vulnerability in Qingda...

SQL Injection Vulnerability in si***.php Page of Qingdao Shangzhixin Network Technology Co.

Qingdao Business to Faith Network Technology Co., Ltd. was founded in March 2001, initially a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services, high-tech specialized companies, is one of the first batch of domestic Internet...

Code Execution Vulnerability in ZSITE of Qingdao eEnterprise Tianchuang Management Consulting Co.

ZSITE is an open source free enterprise portal system designed for enterprise marketing. There is a code execution vulnerability in ZSITE, which can be exploited by an attacker to gain control of the web server of Qingdao Yiqi Tianchuang Management Consulting Co...

SQL Injection Vulnerability in Dongsheng Logistics System of Qingdao Dongsheng Weiye Software Co. Ltd (CNVD-2020-50754)

Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004 formerly known as Qingdao Jinghong Logistics Information Technology Co., Ltd., the company's main business scope for shipping logistics-related products and services. A SQL injection vulnerability exists in Qingdao Dongsheng...