Shaanxi Public Software Co., Ltd. website building system suffers from SQL injection vulnerability

Ltd. has been focusing on the promotion and application of industry informatization construction and management technology, and is a modern high-tech enterprise integrating industry informatization system, development of professional software and technical training service. Shaanxi public softwar...

Fixed several vulnerabilities in SAP products.

Vulnerabilities have been fixed in SAP products. The vulnerabilities enable a malicious person to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS SQL Injection Denial-of-Service DoS. Remote code execution User Rights Access to sensitive data SAP reports a...

EjuCMS suffers from SQL injection vulnerability (CNVD-2020-21980)

EJU real estate system ejucms is a set of localized O2O real estate website platform system. EjuCMS has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Kingsoft V8+ Terminal Security System

V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...

CVE-2020-9407

IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICEJSONRPCCOOKIE cookie...

SQL Injection Vulnerability in Suzhou Topps Website Building System

Suzhou Topps Network Technology Co., Ltd. is a company focusing on website construction, website optimization and other businesses. A SQL injection vulnerability exists in the website building system of Suzhou Topps Network Technology Co. An attacker can use this vulnerability to obtain sensitive...

SQL Injection Vulnerability in Hongfeng Technology CMS Website Management System of Dingbian Lenet Technology Co.

Dingbian Le Net Technology Co., Ltd, is a professional e-commerce solutions, O2O solutions, mobile Internet application system service providers, long-term commitment to e-commerce system solutions, independent shopping malls, vertical SNS community, micro letter marketing platform, cell phone...

Logic flaw vulnerability in the uc***.php file in the frontend of Five Fingers CMS

Five Fingers CMS is an open source content management system. A logic flaw vulnerability exists in the uc.php file in the frontend of Five Fingers CMS. Attackers can use the vulnerability to log in to any user , access sensitive information , to perform unauthorized operations...

Adobe Reader 2017 Security Update (APSB20-05) - Windows

Adobe Reader 2017 is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

GitLab CE/EE Information Disclosure Vulnerability (CNVD-2020-04928)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

SQL injection vulnerability in the background of WoSmart's small program system

WoSmart list store mall small program a key to create and publish small programs, data can be controlled, support for OEM settings. WoSmith small program system background there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitive information in the database...

Design/Logic Flaw

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Billion Smart Energy Router SG600R2 DHCP Lease Status Form Cross-Site Scripting Vulnerability

The Billion Smart Energy Router SG600R2 is a router device. A cross-site scripting vulnerability exists in the Billion Smart Energy Router SG600R2 DHCP lease status form, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain...

SQL Injection Vulnerability in Rongmao Website Building System

Rongmao network is engaged in website design, website revision, flash production, domain name registration, mailbox registration web hosting, e-commerce development, website promotion, website optimization and other services. SQL injection vulnerability exists in Rongmao network website building...

ZTE ZXCLOUD GoldenData VAP Information Disclosure Vulnerability (CNVD-2020-00218)

ZTE ZXCLOUD GoldenData VAP is a set of big data solutions from ZTE Corporation ZTE, China. An information disclosure vulnerability exists in ZTE ZXCLOUD GoldenData VAP versions prior to 4.01.01.02. The vulnerability stems from errors in configuration and other errors in the network system or...

NVMS 1000 - Directory Traversal

NVMS 1000 - Directory Traversal Title: NVMS-1000 - Directory Traversal Date: 2019-12-12 Author: Numan Türle Vendor Homepage: http://en.tvt.net.cn/ Version : N/A Software Link : http://en.tvt.net.cn/products/188.html POC --------- GET /../../../../../../../../../../../../windows/win.ini HTTP/1.1...

SQL Injection Vulnerability in Changzhou Shengke Network Technology Co.

Changzhou Shengke Network Technology Co., Ltd. is the industry's leading technology and unique creativity to provide enterprises with a total solution for website construction company. Changzhou Shengke Network Technology Co., Ltd. website construction system there are SQL injection...

SQL injection vulnerability in the ge*** page po*** parameter of the UCLE Intelligent Education Cloud Platform

Mingbo Education Technology Co., Ltd. is a company that provides quality products, services and solutions for smart education in the field of primary and secondary schools K12. There is a SQL injection vulnerability in the ge page po parameter of the UCL Smart Education Cloud Platform, which can ...

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-02215)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SAP BusinessObjects Business Intelligence Platform Input Validation Error Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. An input validation error vulnerability exists in SAP BusinessObjects...