Arbitrary File Download Vulnerability in H3C S1526

H3C S1526 is a new generation switch launched by Xinhua San Technologies Co. It is targeted at the cultural industry market such as Internet cafes, sing-along bars and digital movie theaters. The H3C S1526 suffers from an arbitrary file download vulnerability that can be exploited by attackers to...

SQL Injection Vulnerability in Disk Enterprise LCMS (CNVD-2021-41519)

Pan Enterprise LCMS is a lightweight PHP development framework . A SQL injection vulnerability exists in PanEnterprise LCMS, which can be exploited by attackers to obtain sensitive information from the database...

Logic Flaw Vulnerability in University Talent Acquisition System

University Talent Acquisition System is a web application. A logic flaw vulnerability exists in the University Talent Recruitment System, which can be exploited by attackers to obtain sensitive information...

Directory Traversal Vulnerability in C-Lodop Print Service System of Taian Montel Software Co.

The business scope of Taian Montel Software Co., Ltd. includes: software development; information technology consulting services; information system integration services; wholesale of computers, software and auxiliary equipment, and so on. Tai'an Mengtaier Software Co., Ltd. C-Lodop print service...

SQL Injection Vulnerability in Disk Enterprise LCMS

Pan Enterprise LCMS is a WEB application development system. A SQL injection vulnerability exists in Pan Enterprise LCMS, which can be exploited by attackers to obtain sensitive information from the database...

Logic Flaw Vulnerability in IPTV Gateway Server at Chengdu Dexin Digital Technology Co.

Chengdu Dexin Digital Technology Co., Ltd. is a national high-tech enterprise integrating science, industry and trade. A logic flaw exists in the IPTV gateway server of Chengdu Dexin Digital Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information...

U Exam has information leakage vulnerability

U Exam is an online exam system. There is an information disclosure vulnerability in You Exam. An attacker can exploit the vulnerability to obtain sensitive information...

Weak Password Vulnerability in Next-Generation Firewall Control System of Beijing Zhongke NetWizard Information Technology Co.

Ltd. is the predecessor of the Chinese Academy of Sciences in 1996 established the "Network Security Studio", is China's earlier engaged in the development of independently controllable network security products and technology enterprises. A weak password vulnerability exists in the control syste...

Beijing Century Changqiu Technology Co., Ltd. Century Star configuration software has a logic flaw vulnerability

Century Star is a PC-based HMI configuration software developed by Beijing Century Changqiu Technology Co. There is a logic flaw vulnerability in the Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd. that can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Jacko Web Design Studio Website Building System (CNVD-2021-39105)

Jacko Web Design Studio is an integrated communication agency with services such as website construction, graphic design and advertising production. A SQL injection vulnerability exists in the website building system of Jacko Web Design Studio. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in Enterprise Standardized Management System of R&S Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a high-tech company specializing in software development and information services. A SQL injection vulnerability exists in the Enterprise Standardized Management System of R&S Information Technology Shanghai Co. An attacker can exploit the...

SQL Injection Vulnerability in the Home Furnishing ERP Management System of Shanghai Furnishing Alliance Information Technology Co.

Home furnishing ERP management system can make the company's pre-sale and after-sale customer resource management more standard, standardized, humanized, maximize the exploitation of customer service value, enhance the company's maximum customer service value. There is a SQL injection vulnerabili...

Directory Traversal Vulnerability in UFIDA New Century System

UFIDA Network Technology Co., Ltd. is an Asia-Pacific local service provider of management software, ERP software, group management software, human resource management software, and customer relationship management software. A directory traversal vulnerability exists in the UFIDA New Century...

Weak Password Vulnerability in Riptide Networks MCP Marketing Cloud Platform

MCP Cloud Marketing Platform is a wireless advertisement push platform system developed by Ruijie Networks for commercial places such as trade chains, hotels, shopping centers, wireless cities, transportation stations, tourist attractions and other commercial places with advertisement marketing...

SQL Injection Vulnerability in CmsEasy of Siping Jiuzhou Yitong Technology Co.

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. SQL injection vulnerability exists in CmsEasy of Siping City Jiuzhou Yitong Technology Co. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38036)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Weak Password Vulnerability in F100 Series of Xinhua San Technologies Co.

The F100 series is a firewall from Xinhua San Technologies Co. A weak password vulnerability exists in the F100 series of Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in S5100 and P5100 of SZTech Co.

The S5100 and P5100 are hardware gateway products from DeepService Technology Co. A weak password vulnerability exists in the S5100 and P5100 of the DeepSign Technology Corporation, which can be exploited by an attacker to obtain sensitive information...

SQL Injection Vulnerability in Tianzhi Intelligent Hospital Integrated Quality Supervision Platform

Shenzhen Qianhai Tianzhi Information Technology Co., Ltd. is a national high-tech enterprise which firstly focuses on the management of hospital grade evaluation and the informationization construction of hospital comprehensive quality supervision platform. There is a SQL injection vulnerability ...

Weak Password Vulnerability in Aditon AC Centralized Management Platform

Adstone Adstone is a solution provider in the field of mobile Internet, dedicated to providing enterprise users with next-generation wireless network connectivity and application solutions such as Smart Wireless, BYOD, Precise Wireless Positioning, OTO, and Wearable Technology. The products inclu...