Weak password vulnerability in WayOS intelligent route management system (CNVD-2021-24518)

WayOS intelligent route management system is designed for small and medium-sized enterprises, Internet cafes, rental houses, supermarkets and other industry scenarios, highlighting Internet behavior management, bandwidth overlay, intelligent QOS, PPP0E authentication server, WeChat WiFi connectio...

Weintek EasyWeb cMT

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Weintek Equipment: cMT Vulnerabilities: Code Injection, Improper Access Control, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

Weak Password Vulnerability in WX2540H of Xinhua San Technologies Co.

The WX2540H is a wireless controller. A weak password vulnerability exists in the WX2540H of Xinhua San Technologies Limited, which can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in WX2560H of Xinhua San Technologies Co.

WX2560H is a gateway-type wireless controller independently developed by Xinhua San Technologies Co. A weak password vulnerability exists in the WX2560H of Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-24453)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-24454)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited. An attacker can exploit the vulnerability to obtain...

Weak Password Vulnerability in SecPath U200-A of Xinhua San Technologies Co.

SecPath U200-A is a new-generation UTM United Threat Management device designed by H3C for small and medium-sized enterprises/branch offices. A weak password vulnerability exists in the H3C SecPath U200-A, which can be exploited by attackers to obtain sensitive information...

Directory Traversal Vulnerability in SCT's Website Building System

Siltronic is committed to the cause of disaster reduction and profitability, and provides comprehensive solutions for disaster reduction and profitability informationization. A directory traversal vulnerability exists in SCT's website building system, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in LJCMS of Beijing Liangjing Zhicheng Technology Co., Ltd (CNVD-2021-24966)

LJCMS is a free and open source content management system. Beijing Liangjingzhicheng Technology Co., Ltd LJCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in zzphp 1.8.0 Backend

zzphp is a content management system. A SQL injection vulnerability exists in the zzzzphp 1.8.0 backend. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in E-Trend Intelligent eHR Management Platform (CNVD-2021-24434)

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. E-Trend Intelligent eHR Management Platform has SQL injection vulnerabilities, which ca...

Weak Password Vulnerability in Alibaba Nacos

Nacos is the latest open source project from Alibaba. Alibaba Nacos has a weak password vulnerability. Attackers use the default weak password to log in to the system background to obtain sensitive information...

Weak Password Vulnerability in NetSense SecADS 3600 Application Delivery System

NetShen SecADS 3600 Application Delivery System is a product launched for customers in industries such as government, enterprises, education, carriers, and IDC data centers, which is able to solve the problems caused by insufficient server processing power, WAN link bandwidth unable to meet...

SQL Injection Vulnerability in PHPSHE Mall System PC Version

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation and feedback and other functions, and provides easy to operate, practical features, quickly allow users to establish a personalized online store...

Weak password vulnerability in H3C ER6300 routers

H3C ER6300 router is a high-performance full gigabit router for Internet cafes from Xinhua San Technologies Co. The H3C ER6300 router has a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in H3C ER3108G Gigabit Router

The H3C ER3108G Gigabit Router is a new generation of enterprise-class Gigabit high-performance routers from Xinhua San Technologies Co. The H3C ER3108G Gigabit Router suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Flying Fish Star Router WEB Configuration System

Founded in 2002 and listed in 2014 stock code: 831002, Chengdu Flying Fish Star Technology Co., Ltd. is headquartered in Chengdu Tianfu Software Park, and is one of the few local enterprises in the industry with independent intellectual property rights and independent R & D capabilities, focusing...

SQL Injection Vulnerability in Schoolfree Psychological Assessment System (CNVD-2021-23551)

School Worry Free Psychological Assessment System is a platform that enables online mental health testing and diagnosis through the Internet. SQL injection vulnerability exists in School Worry-free Psychological Assessment System, which can be exploited by attackers to obtain sensitive informatio...

Weak password vulnerability in TOTOLINK smart routers

TOTOLINK is a brand of mid-to-high-end wireless routing in the Asia Pacific region, with a market share of 82.3% in Korea. A weak password vulnerability exists in TOTOLINK smart routers, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Flying FishStar Next-Generation Firewall Security Gateway

Chengdu Flying Fish Star Technology Co., Ltd. is a value-added service that serves enterprise, business and home users with intelligent and easy-to-use network communication management devices and innovative technologies. A weak password vulnerability exists in the security gateway of Flyingfish...