SQL Injection Vulnerability in the Website Building System of Haikou ECCOM Sky Information Technology Company Limited (CNVD-2021-41234)

hereinafter referred to as "ECCOM Sky" is a collection of website construction, website planning, website optimization, search engine optimization and a variety of office software development, program development in one of the high-speed and healthy development of network information technology...

Directory Traversal Vulnerability in Advantech WebAccess Node

Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech in Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. A directory traversal vulnerability exists in Advantech WebAccess Node. An attacker can...

Weak Password Vulnerability in Firewall DCFOS at Digital China Cloud Computing Information Technology Co.

Ltd. is a professional company with independent network and cloud brand and intellectual property rights under Digital China Group, and is a network and cloud equipment and solution provider involved in IPv6. A weak password vulnerability exists in DCFOS of Digital China Beijing CloudTech...

Weak Password Vulnerability in RG-UAC 6000-ISG Video Access Security Gateway

RG-UAC 6000-ISG series video surveillance security gateway is a video surveillance network security reinforcement product independently developed by Ruijie Networks. The RG-UAC 6000-ISG video access security gateway has a weak password vulnerability, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Disk Enterprise LCMS (CNVD-2021-41519)

Pan Enterprise LCMS is a lightweight PHP development framework . A SQL injection vulnerability exists in PanEnterprise LCMS, which can be exploited by attackers to obtain sensitive information from the database...

Logic Flaw Vulnerability in University Talent Acquisition System

University Talent Acquisition System is a web application. A logic flaw vulnerability exists in the University Talent Recruitment System, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in H3C S1526

H3C S1526 is a new generation switch launched by Xinhua San Technologies Co. It is targeted at the cultural industry market such as Internet cafes, sing-along bars and digital movie theaters. The H3C S1526 suffers from an arbitrary file download vulnerability that can be exploited by attackers to...

Directory Traversal Vulnerability in C-Lodop Print Service System of Taian Montel Software Co.

The business scope of Taian Montel Software Co., Ltd. includes: software development; information technology consulting services; information system integration services; wholesale of computers, software and auxiliary equipment, and so on. Tai'an Mengtaier Software Co., Ltd. C-Lodop print service...

SQL Injection Vulnerability in Disk Enterprise LCMS

Pan Enterprise LCMS is a WEB application development system. A SQL injection vulnerability exists in Pan Enterprise LCMS, which can be exploited by attackers to obtain sensitive information from the database...

Logic Flaw Vulnerability in IPTV Gateway Server at Chengdu Dexin Digital Technology Co.

Chengdu Dexin Digital Technology Co., Ltd. is a national high-tech enterprise integrating science, industry and trade. A logic flaw exists in the IPTV gateway server of Chengdu Dexin Digital Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information...

U Exam has information leakage vulnerability

U Exam is an online exam system. There is an information disclosure vulnerability in You Exam. An attacker can exploit the vulnerability to obtain sensitive information...

Weak Password Vulnerability in Next-Generation Firewall Control System of Beijing Zhongke NetWizard Information Technology Co.

Ltd. is the predecessor of the Chinese Academy of Sciences in 1996 established the "Network Security Studio", is China's earlier engaged in the development of independently controllable network security products and technology enterprises. A weak password vulnerability exists in the control syste...

Beijing Century Changqiu Technology Co., Ltd. Century Star configuration software has a logic flaw vulnerability

Century Star is a PC-based HMI configuration software developed by Beijing Century Changqiu Technology Co. There is a logic flaw vulnerability in the Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd. that can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Jacko Web Design Studio Website Building System (CNVD-2021-39105)

Jacko Web Design Studio is an integrated communication agency with services such as website construction, graphic design and advertising production. A SQL injection vulnerability exists in the website building system of Jacko Web Design Studio. An attacker can exploit this vulnerability to obtain...

Directory Traversal Vulnerability in UFIDA New Century System

UFIDA Network Technology Co., Ltd. is an Asia-Pacific local service provider of management software, ERP software, group management software, human resource management software, and customer relationship management software. A directory traversal vulnerability exists in the UFIDA New Century...

SQL Injection Vulnerability in the Home Furnishing ERP Management System of Shanghai Furnishing Alliance Information Technology Co.

Home furnishing ERP management system can make the company's pre-sale and after-sale customer resource management more standard, standardized, humanized, maximize the exploitation of customer service value, enhance the company's maximum customer service value. There is a SQL injection vulnerabili...

SQL Injection Vulnerability in Enterprise Standardized Management System of R&S Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a high-tech company specializing in software development and information services. A SQL injection vulnerability exists in the Enterprise Standardized Management System of R&S Information Technology Shanghai Co. An attacker can exploit the...

Weak Password Vulnerability in Riptide Networks MCP Marketing Cloud Platform

MCP Cloud Marketing Platform is a wireless advertisement push platform system developed by Ruijie Networks for commercial places such as trade chains, hotels, shopping centers, wireless cities, transportation stations, tourist attractions and other commercial places with advertisement marketing...

SQL Injection Vulnerability in CmsEasy of Siping Jiuzhou Yitong Technology Co.

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. SQL injection vulnerability exists in CmsEasy of Siping City Jiuzhou Yitong Technology Co. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38036)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...