SQL Injection Vulnerability in Rendezvous Collaboration CRM

Anywhere Collaborative CRM is a customer relationship management system. A SQL injection vulnerability exists in Rendezvous CRM, which can be exploited by attackers to obtain sensitive information from the database...

XML Entity Injection Vulnerability in Dynamic CMS

Dynamic CMS is a web content management system based on ASP+ACCESS development. Dynamic CMS has an XML entity injection vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in H3C ER3200 of Xinhua San Technologies Limited (CNVD-2021-12741)

The H3C ER3200 is a router from Xinhua San Technology Co. A weak password vulnerability exists in the H3C ER3200 of Xinhua San Technologies Limited, which can be exploited by an attacker to obtain sensitive information...

Logic Flaw Vulnerability in Student Work Management Information System of Zhengfang Software Co. Ltd (CNVD-2021-12684)

Positive Student Work Management System is mainly applied to academic affairs management and auditing of faculty and student affairs, etc., and is an important academic affairs application for many universities and colleges. A logic flaw vulnerability exists in the Student Work Management...

SQL Injection Vulnerability in Tanaosoft Towel Textile ERP System

Ltd. was formerly known as "Huai'an Qixi Software Co., Ltd.", is a dual-soft certification, with independent computer software research and development capabilities, software development and sales-oriented technology-based enterprises. A SQL injection vulnerability exists in the Tanaosoft Towel...

Multiple Vulnerabilities in Zhiyuan OA

Founded in March 2002 and headquartered in Beijing, Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet has always been focusing on the field of enterprise-level management software, and is a high-tech enterprise integrating product design, research and development, sales and service. The...

SQL injection vulnerability in songcms backend (CNVD-2021-12738)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

SQL injection vulnerability in songcms backend (CNVD-2021-12736)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

SQL injection vulnerability in songcms backend (CNVD-2021-12737)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

SQL injection vulnerability in songcms backend (CNVD-2021-12739)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

Directory Traversal Vulnerability in Wizbang International Enterprise Management Software

Ltd. is mainly engaged in the design, development, sales and service of enterprise management software such as ERP, CRM, project management, human resource management, mobile application and so on. There is a directory traversal vulnerability in the Wizbang International enterprise management...

SQL Injection Vulnerability in Electronic Evidence Management Software of Shenzhen Police Wing Intelligent Technology Co.

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management software SQL injection vulnerability,...

SQL Injection Vulnerability in the Website Building System of Shandong Chengtong Technology Co.

Ltd. is a company dedicated to industry enterprise informatization, cloud computing platform, human resources management system research and development and technical consulting services company Shandong Chengtong Technology Co., Ltd. website building system has a SQL injection vulnerability, whi...

SQL Injection Vulnerability in Energy Information Management System of Chongqing Jutai Internet of Things Group Limited (CNVD-2021-10513)

Chongqing Jutai Internet of Things Group Co., Ltd. is a company engaged in the research and development, production, and sales/computer system integration of hardware and software for Internet of Things products. A SQL injection vulnerability exists in the energy information management system of...

SIYUCMS backend has arbitrary file reading vulnerability

SIYUCMS is a content management system based on ThinkPHP + AdminLTE. An arbitrary file read vulnerability exists in the backend of SIYUCMS. Attackers can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co. Ltd (CNVD-2021-10548)

Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...

SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co.

Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...

SQL Injection Vulnerability in Chengdu Timeshift Technology Co.

Chengdu Times Huichuang Technology Co., Ltd, referred to as Times Huichuang, is an information technology service-oriented enterprise integrating Internet software research and development, website operation, e-commerce and IT services. A SQL injection vulnerability exists in the website builder...

Cisco SD-WAN vManage Authorization Bypass Vulnerability (CNVD-2020-62341)

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An authorization bypass vulnerability exists in the SSH console of the Web management interface of Cisco SD-WAN vManage, which can be exploited by an attacker to access sensitive informati...

Authorization

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...