CVE-2024-43040

Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid parameter at /fx/baseinfo/SearchInfo...

Renwoxing Enterprise Intelligent Management System 安全漏洞

Renwoxing Enterprise Intelligent Management System is an Enterprise Intelligent Management System from Renwoxing, China. A security vulnerability exists in Renwoxing Enterprise Intelligent Management System versions prior to 3.0, which originates from a SQL injection vulnerability in the parid...

CVE-2024-43040

Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid parameter at /fx/baseinfo/SearchInfo...

CVE-2024-43040

CVE-2024-43040 affects Renwoxing Enterprise Intelligent Management System (pre-3.0). A SQL injection via parid at /fx/baseinfo/SearchInfo could allow a remote attacker to view/modify data; CVSS 3.1 base score 9.1 (NETWORK, HIGH impact on confidentiality and integrity). IBM Watson CP4D Data Stores...

PT-2024-30267 · Unknown · Renwoxing Enterprise Intelligent Management System

Name of the Vulnerable Software and Affected Versions: Renwoxing Enterprise Intelligent Management System versions prior to 3.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the parid parameter at the "/fx/baseinfo/SearchInfo" API endpoint...

XiaoBingBy TeaCMS SQL注入漏洞

XiaoBingBy TeaCMS is a blog system by xiaobingby personal developer. XiaoBingBy TeaCMS 2.0.2 and previous versions have a SQL injection vulnerability, the vulnerability stems from a problem with the code in the file /admin/getallarticleinfo, where the operation of the parameter searchInfo can lea...

stephaniemorris26.expertscolumn.com XSS vulnerability

Open Bug Bounty ID: OBB-604254 Description| Value ---|--- Affected Website:| stephaniemorris26.expertscolumn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

某教育门户CMS存在五处SQL注入

简要描述： RT 详细说明： 释锐是全国领先的智慧教育解决方案供应商。致力于通过技术创新为中小学、职校、高校和教育行政管理机构提供有竞争力的智慧教育解决方案和服务，持续提升客户体验，为客户创造最大价值。目前，释锐的产品和解决方案已经应用于 25 个省市，服务全国 3000 多所学校。 注入点：index.jsp?groupId=，labelGroup.jsp?labelName=， searchInfo.jsp?orderBy=， groupList.jsp?orderBy=，ta.jsp?tpId=&uuid= 案例： 注入点1：...