CVE-2024-43040

Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid parameter at /fx/baseinfo/SearchInfo...

CVE-2024-43040

Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid parameter at /fx/baseinfo/SearchInfo...

CVE-2024-43040

CVE-2024-43040 affects Renwoxing Enterprise Intelligent Management System (pre-3.0). A SQL injection via parid at /fx/baseinfo/SearchInfo could allow a remote attacker to view/modify data; CVSS 3.1 base score 9.1 (NETWORK, HIGH impact on confidentiality and integrity). IBM Watson CP4D Data Stores...

Renwoxing Enterprise Intelligent Management System 安全漏洞

Renwoxing Enterprise Intelligent Management System is an Enterprise Intelligent Management System from Renwoxing, China. A security vulnerability exists in Renwoxing Enterprise Intelligent Management System versions prior to 3.0, which originates from a SQL injection vulnerability in the parid...

PT-2024-30267 · Unknown · Renwoxing Enterprise Intelligent Management System

Name of the Vulnerable Software and Affected Versions: Renwoxing Enterprise Intelligent Management System versions prior to 3.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the parid parameter at the "/fx/baseinfo/SearchInfo" API endpoint...

XiaoBingBy TeaCMS SQL注入漏洞

XiaoBingBy TeaCMS is a blog system by xiaobingby personal developer. XiaoBingBy TeaCMS 2.0.2 and previous versions have a SQL injection vulnerability, the vulnerability stems from a problem with the code in the file /admin/getallarticleinfo, where the operation of the parameter searchInfo can lea...

stephaniemorris26.expertscolumn.com XSS vulnerability

Open Bug Bounty ID: OBB-604254 Description| Value ---|--- Affected Website:| stephaniemorris26.expertscolumn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

某教育门户CMS存在五处SQL注入

简要描述： RT 详细说明： 释锐是全国领先的智慧教育解决方案供应商。致力于通过技术创新为中小学、职校、高校和教育行政管理机构提供有竞争力的智慧教育解决方案和服务，持续提升客户体验，为客户创造最大价值。目前，释锐的产品和解决方案已经应用于 25 个省市，服务全国 3000 多所学校。 注入点：index.jsp?groupId=，labelGroup.jsp?labelName=， searchInfo.jsp?orderBy=， groupList.jsp?orderBy=，ta.jsp?tpId=&uuid= 案例： 注入点1：...