Code injection

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 an...

CVE-2020-12001

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 an...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-44109)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

ShopsN open source mall system sa*** there are SQL injection vulnerabilities

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system sa there is a SQL injection...

SQL Injection Vulnerability in Website Building System of Kaiping Lianke Network Technology Co. Ltd (CNVD-2020-38976)

Kaiping Lianke Network Technology Co., Ltd. is a company that mainly specializes in website construction, website promotion, speed software, sanitary ware ERP management software, and micro letter marketing. Kaiping City, Lianke Network Technology Co., Ltd. building system there are SQL injection...

SQL Injection Vulnerability in Jeesite of Jinan Zhuoyuan Software Co.

JeeSite is an enterprise information technology development infrastructure platform , Java enterprise applications open source framework. Jinan Zhuoyuan Software Co., Ltd. Jeesite SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Rockwell Automation FactoryTalk Linx Software (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: FactoryTalk Linx Software Vulnerabilities: Improper Input Validation, Path Traversal, Unrestricted Upload of File with Dangerous Type 2. RISK EVALUATION Successful...

Arbitrary File Download Vulnerability in Website Building System of Beijing Zhongjin Yunchuang Software Co.

Ltd. is a company that has the ability to implement and develop traditional ERP, as well as experience in mobile Internet applications. There is an arbitrary file download vulnerability in the website building system of Beijing Zhongjin Yunchuang Software Co., Ltd, which can be exploited by...

IBM WebSphere Application Server Information Disclosure Vulnerability (CNVD-2020-32641)

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. An information disclosure vulnerability exists in IBM WebSphere...

SQL injection vulnerability in pho*** page of website building system of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. Ltd. station building system pho page exists SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in the Pro*** Page of the Website Building System of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. Ltd. station building system pro page there is a SQL injection vulnerability, the attacker can use the vulnerability to obtain database...

PHPCMS suffers from SQL injection vulnerability

PHPCMS uses OOP object-oriented approach to the independent development of the framework. The framework is easy to expand, stable and with ultra-powerful load capacity, can fully meet the government agencies, educational institutions, institutions, commercial enterprises, individual webmasters...

SQL Injection Vulnerability in Pangu Website System of Shenyang Pangu Network Technology Co.

Shenyang Pangu Network Technology Co., Ltd. is a Baidu business as the core, for the local business to provide network marketing services of the Internet + group of companies. Shenyang Pangu Network Technology Co., Ltd. Pangu website system SQL injection vulnerability, attackers can use the...

CVE-2020-4187

IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174805...

Google Android Framework Information Disclosure Vulnerability (CNVD-2020-31527)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Framework component of Google Android 10. An attacker can exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in University Worry-Free Online Course Selection System

School Worry-Free Online Course Selection System is designed to solve the problem of cumbersome work brought about by students' independent course selection by selecting courses online and completing personal course selection information, replacing the manual operation with paper. The system is...

MetInfo suffers from SQL injection vulnerability (CNVD-2020-33064)

MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

IBM MobileFirst Platform Foundation Information Disclosure Vulnerability

IBM MobileFirst Platform Foundation is a suite of mobile application management solutions from IBM in the United States. The product is mainly used for building, managing and updating mobile applications. A security vulnerability exists in IBM MobileFirst Platform Foundation version 8.0.0.0, whic...

SQL Injection Vulnerability in One Card Communication Service Client of Xiondi Co.

The XIONGDY Technology OneCard Communication Service Client is a one-card management system of XIONGDY Co. A SQL injection vulnerability exists in the One Card Communication Service Client of Xiondi Corporation. An attacker can exploit the vulnerability to obtain sensitive information from the...

Inductive Automation Ignition Code Issue Vulnerability

Inductive Automation Ignition is a suite of integrated software platforms for SCADA systems from Inductive Automation, USA. The platform supports SCADA data acquisition and monitoring systems, HMI human machine interface and more. A code issue vulnerability exists in the handling of serialized da...