Billion Smart Energy Router SG600R2 DHCP Lease Status Form Cross-Site Scripting Vulnerability

The Billion Smart Energy Router SG600R2 is a router device. A cross-site scripting vulnerability exists in the Billion Smart Energy Router SG600R2 DHCP lease status form, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain...

SQL Injection Vulnerability in Rongmao Website Building System

Rongmao network is engaged in website design, website revision, flash production, domain name registration, mailbox registration web hosting, e-commerce development, website promotion, website optimization and other services. SQL injection vulnerability exists in Rongmao network website building...

ZTE ZXCLOUD GoldenData VAP Information Disclosure Vulnerability (CNVD-2020-00218)

ZTE ZXCLOUD GoldenData VAP is a set of big data solutions from ZTE Corporation ZTE, China. An information disclosure vulnerability exists in ZTE ZXCLOUD GoldenData VAP versions prior to 4.01.01.02. The vulnerability stems from errors in configuration and other errors in the network system or...

NVMS 1000 - Directory Traversal

NVMS 1000 - Directory Traversal Title: NVMS-1000 - Directory Traversal Date: 2019-12-12 Author: Numan Türle Vendor Homepage: http://en.tvt.net.cn/ Version : N/A Software Link : http://en.tvt.net.cn/products/188.html POC --------- GET /../../../../../../../../../../../../windows/win.ini HTTP/1.1...

SQL Injection Vulnerability in Changzhou Shengke Network Technology Co.

Changzhou Shengke Network Technology Co., Ltd. is the industry's leading technology and unique creativity to provide enterprises with a total solution for website construction company. Changzhou Shengke Network Technology Co., Ltd. website construction system there are SQL injection...

SQL injection vulnerability in the ge*** page po*** parameter of the UCLE Intelligent Education Cloud Platform

Mingbo Education Technology Co., Ltd. is a company that provides quality products, services and solutions for smart education in the field of primary and secondary schools K12. There is a SQL injection vulnerability in the ge page po parameter of the UCL Smart Education Cloud Platform, which can ...

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-02215)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SAP BusinessObjects Business Intelligence Platform Input Validation Error Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. An input validation error vulnerability exists in SAP BusinessObjects...

SQL injection vulnerability in pi***.php page of website building system of Hebei Chenguang Network Technology Co.

Hebei Chenguang Network Technology Co., Ltd. is subordinate to Hebei Chenguang Holding Group, founded in 2005, is a high-tech enterprise dedicated to providing informationization construction for various enterprises and government agencies. Hebei Chenguang Network Technology Co., Ltd. building...

SQL Injection Vulnerability in Yunye CMS

Yunye cms enterprise building system is developed by php + mysql a set of open source cms dedicated to small and medium-sized enterprise website construction. Yunye CMS SQL injection vulnerability , attackers can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in MyfCMS Backend at Adding New Posts

Min Yifei Content Management System, abbreviated MyfCMS, is a PHP+Mysql content management system. A SQL injection vulnerability exists in the backend of MyfCMS at Add New Article. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in SiteBuilder System

siteBuilder is a self-service website building system. A SQL injection vulnerability exists in the site builder system. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in seacms backend (CNVD-2019-43683)

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the backend of seacms, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in ad***_ne***.php file mo*** parameters in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file mo parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

XSS Vulnerability in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co.

Ltd. specializes in the research, development and integration of one card system and campus payment platform. An XSS vulnerability exists in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co. An attacker can exploit this vulnerability to obtain sensitive information...

S-CMS enterprise website builder system aj***.php page C_f*** parameter has SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website building system aj.php page Cf parameters exist SQL injection vulnerability, attackers can use the...

ShopsN open source mall system sa*** function SQL injection vulnerabilities exist

ShopsN free version of B2C e-commerce is a product of Shanghai Yisu Network Technology Co. ShopsN open source mall system sa function SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information mutual database...

SQL Injection Vulnerability in Penta's Academic Affairs System

Shanghai Pengda Computer System Development Co., Ltd. is a company dedicated to vocational education informatization solutions, products involved in education management, teaching applications, teaching services and other areas. SQL injection vulnerability exists in Pangda's teaching system, whic...

SQL Injection Vulnerability in Website Building System **ws.asp of Anshan China Domain Network Technology Co.

Ltd. hereinafter referred to as Anshan in the domain network was registered in early 2007, is a main website building, website construction business of high-tech network companies. Ltd. website building system ws.asp SQL injection vulnerability, attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in the Front-end of Nanjing Benan's Hidden Trouble Investigation and Management Information System for Work Safety Accidents

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. SQL injection vulnerability exists in the front-end of Nanjing Benan's information system for investigating and managing hidden productio...