Catalog Traversal Vulnerability in GLIS, a General Library Integrated Management System of Beijing Qingda Xinyang Information Technology Co.

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

Weak Password Vulnerability in Founder's Firewall

Rooted in Beida, Founder Group is committed to continuously providing excellent products and services to create a smarter, healthier and more affluent life for people. A weak password vulnerability exists in the Founder's firewall, which can be exploited by attackers to obtain sensitive informati...

Weak password vulnerability in several Huawei products

The Secoway USG2160BSR is a firewall from Huawei Technologies, the Huawei SRG3230 is a gateway, and the Huawei SRG1220 is a router from Huawei Technologies. A weak password vulnerability exists in several Huawei products, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in WayOS intelligent route management system (CNVD-2021-24518)

WayOS intelligent route management system is designed for small and medium-sized enterprises, Internet cafes, rental houses, supermarkets and other industry scenarios, highlighting Internet behavior management, bandwidth overlay, intelligent QOS, PPP0E authentication server, WeChat WiFi connectio...

Weintek EasyWeb cMT

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Weintek Equipment: cMT Vulnerabilities: Code Injection, Improper Access Control, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

Weak Password Vulnerability in WX2540H of Xinhua San Technologies Co.

The WX2540H is a wireless controller. A weak password vulnerability exists in the WX2540H of Xinhua San Technologies Limited, which can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in WX2560H of Xinhua San Technologies Co.

WX2560H is a gateway-type wireless controller independently developed by Xinhua San Technologies Co. A weak password vulnerability exists in the WX2560H of Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-24453)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-24454)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited. An attacker can exploit the vulnerability to obtain...

Directory Traversal Vulnerability in SCT's Website Building System

Siltronic is committed to the cause of disaster reduction and profitability, and provides comprehensive solutions for disaster reduction and profitability informationization. A directory traversal vulnerability exists in SCT's website building system, which can be exploited by attackers to obtain...

Weak Password Vulnerability in SecPath U200-A of Xinhua San Technologies Co.

SecPath U200-A is a new-generation UTM United Threat Management device designed by H3C for small and medium-sized enterprises/branch offices. A weak password vulnerability exists in the H3C SecPath U200-A, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in zzphp 1.8.0 Backend

zzphp is a content management system. A SQL injection vulnerability exists in the zzzzphp 1.8.0 backend. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in LJCMS of Beijing Liangjing Zhicheng Technology Co., Ltd (CNVD-2021-24966)

LJCMS is a free and open source content management system. Beijing Liangjingzhicheng Technology Co., Ltd LJCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in E-Trend Intelligent eHR Management Platform (CNVD-2021-24434)

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. E-Trend Intelligent eHR Management Platform has SQL injection vulnerabilities, which ca...

Weak Password Vulnerability in Alibaba Nacos

Nacos is the latest open source project from Alibaba. Alibaba Nacos has a weak password vulnerability. Attackers use the default weak password to log in to the system background to obtain sensitive information...

Weak Password Vulnerability in NetSense SecADS 3600 Application Delivery System

NetShen SecADS 3600 Application Delivery System is a product launched for customers in industries such as government, enterprises, education, carriers, and IDC data centers, which is able to solve the problems caused by insufficient server processing power, WAN link bandwidth unable to meet...

SQL Injection Vulnerability in PHPSHE Mall System PC Version

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation and feedback and other functions, and provides easy to operate, practical features, quickly allow users to establish a personalized online store...

Weak password vulnerability in H3C ER6300 routers

H3C ER6300 router is a high-performance full gigabit router for Internet cafes from Xinhua San Technologies Co. The H3C ER6300 router has a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in H3C ER3108G Gigabit Router

The H3C ER3108G Gigabit Router is a new generation of enterprise-class Gigabit high-performance routers from Xinhua San Technologies Co. The H3C ER3108G Gigabit Router suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Flying Fish Star Router WEB Configuration System

Founded in 2002 and listed in 2014 stock code: 831002, Chengdu Flying Fish Star Technology Co., Ltd. is headquartered in Chengdu Tianfu Software Park, and is one of the few local enterprises in the industry with independent intellectual property rights and independent R & D capabilities, focusing...