SQL Injection Vulnerability in Suzhou Topps Website Building System

Suzhou Topps Network Technology Co., Ltd. is a company focusing on website construction, website optimization and other businesses. A SQL injection vulnerability exists in the website building system of Suzhou Topps Network Technology Co. An attacker can use this vulnerability to obtain sensitive...

SQL Injection Vulnerability in Hongfeng Technology CMS Website Management System of Dingbian Lenet Technology Co.

Dingbian Le Net Technology Co., Ltd, is a professional e-commerce solutions, O2O solutions, mobile Internet application system service providers, long-term commitment to e-commerce system solutions, independent shopping malls, vertical SNS community, micro letter marketing platform, cell phone...

Logic flaw vulnerability in the uc***.php file in the frontend of Five Fingers CMS

Five Fingers CMS is an open source content management system. A logic flaw vulnerability exists in the uc.php file in the frontend of Five Fingers CMS. Attackers can use the vulnerability to log in to any user , access sensitive information , to perform unauthorized operations...

Adobe Reader 2017 Security Update (APSB20-05) - Windows

Adobe Reader 2017 is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

GitLab CE/EE Information Disclosure Vulnerability (CNVD-2020-04928)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

SQL injection vulnerability in the background of WoSmart's small program system

WoSmart list store mall small program a key to create and publish small programs, data can be controlled, support for OEM settings. WoSmith small program system background there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitive information in the database...

Design/Logic Flaw

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Billion Smart Energy Router SG600R2 DHCP Lease Status Form Cross-Site Scripting Vulnerability

The Billion Smart Energy Router SG600R2 is a router device. A cross-site scripting vulnerability exists in the Billion Smart Energy Router SG600R2 DHCP lease status form, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain...

SQL Injection Vulnerability in Rongmao Website Building System

Rongmao network is engaged in website design, website revision, flash production, domain name registration, mailbox registration web hosting, e-commerce development, website promotion, website optimization and other services. SQL injection vulnerability exists in Rongmao network website building...

ZTE ZXCLOUD GoldenData VAP Information Disclosure Vulnerability (CNVD-2020-00218)

ZTE ZXCLOUD GoldenData VAP is a set of big data solutions from ZTE Corporation ZTE, China. An information disclosure vulnerability exists in ZTE ZXCLOUD GoldenData VAP versions prior to 4.01.01.02. The vulnerability stems from errors in configuration and other errors in the network system or...

NVMS 1000 - Directory Traversal

NVMS 1000 - Directory Traversal Title: NVMS-1000 - Directory Traversal Date: 2019-12-12 Author: Numan Türle Vendor Homepage: http://en.tvt.net.cn/ Version : N/A Software Link : http://en.tvt.net.cn/products/188.html POC --------- GET /../../../../../../../../../../../../windows/win.ini HTTP/1.1...

SQL Injection Vulnerability in Changzhou Shengke Network Technology Co.

Changzhou Shengke Network Technology Co., Ltd. is the industry's leading technology and unique creativity to provide enterprises with a total solution for website construction company. Changzhou Shengke Network Technology Co., Ltd. website construction system there are SQL injection...

SQL injection vulnerability in the ge*** page po*** parameter of the UCLE Intelligent Education Cloud Platform

Mingbo Education Technology Co., Ltd. is a company that provides quality products, services and solutions for smart education in the field of primary and secondary schools K12. There is a SQL injection vulnerability in the ge page po parameter of the UCL Smart Education Cloud Platform, which can ...

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-02215)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SAP BusinessObjects Business Intelligence Platform Input Validation Error Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. An input validation error vulnerability exists in SAP BusinessObjects...

SQL injection vulnerability in pi***.php page of website building system of Hebei Chenguang Network Technology Co.

Hebei Chenguang Network Technology Co., Ltd. is subordinate to Hebei Chenguang Holding Group, founded in 2005, is a high-tech enterprise dedicated to providing informationization construction for various enterprises and government agencies. Hebei Chenguang Network Technology Co., Ltd. building...

SQL Injection Vulnerability in Yunye CMS

Yunye cms enterprise building system is developed by php + mysql a set of open source cms dedicated to small and medium-sized enterprise website construction. Yunye CMS SQL injection vulnerability , attackers can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in MyfCMS Backend at Adding New Posts

Min Yifei Content Management System, abbreviated MyfCMS, is a PHP+Mysql content management system. A SQL injection vulnerability exists in the backend of MyfCMS at Add New Article. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in SiteBuilder System

siteBuilder is a self-service website building system. A SQL injection vulnerability exists in the site builder system. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in seacms backend (CNVD-2019-43683)

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the backend of seacms, which can be exploited by attackers to obtain sensitive database information...