Unauthorized Access Vulnerability in Multiple Systems of Xi'an Aofeng Software Co.

Ltd. is located in Xi'an Software Park, a member subsidiary of Jaisei, is a high-tech enterprise specializing in gas industry informatization construction, with more than 10 years of experience in gas industry informatization construction. Xi'an Aofeng Software Co., Ltd. has unauthorized access...

Logic Flaw Vulnerability in Zhengfang Teaching Management System of Zhengfang Software Co.

Based on the main line of cultivation, operation, guarantee and monitoring, the Zhengfang Academic Affairs Management System realizes the superposition of transactional management and strategic management of academic affairs, and meets the strategic needs of the school's cultivation process...

File Upload Vulnerability in Website Building System of Shandong Guozi Software Co.

Shandong Guozi Software Co., Ltd. is a professional application software product development and industry solution provider. A file upload vulnerability exists in the website builder system of Shandong Guozi Software Co. Ltd, which can be exploited by attackers to gain control of the server...

SQL Injection Vulnerability in Lotus Commercial Concrete Management Software of Hangzhou Lotus Software Co.

Hangzhou Lotus Software Co., Ltd, was registered in Hangzhou on 2004-01-07, belongs to the software and information technology services industry, the main industry is software and information technology services industry, the number of employees 5 people, the registered capital of 1 million yuan...

Logic Flaw Vulnerability in Student Work Management Information System of Zhengfang Software Co. Ltd (CNVD-2021-12684)

Positive Student Work Management System is mainly applied to academic affairs management and auditing of faculty and student affairs, etc., and is an important academic affairs application for many universities and colleges. A logic flaw vulnerability exists in the Student Work Management...

SQL Injection Vulnerability in Dongsheng Logistics Software of Qingdao Dongsheng Weiye Software Co. Ltd (CNVD-2021-08484)

Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004, the company's main business expanded into three major segments, namely, logistics consulting, logistics information platform and logistics software. A SQL injection vulnerability exists in Qingdao Dongsheng Weiye Software Co...

SQL Injection Vulnerability in CRM E4/Standard Edition of Pengwei Software Co.

The general business items of Pengwei Software Co., Ltd. are: technical development and sales of computer hardware and software, electronic products, etc. A SQL injection vulnerability exists in the CRM E4/Standard Edition of Pengwei Software Co., Ltd. that can be exploited by attackers to obtain...

Zhiyuan OA arbitrary file write vulnerability-vulnerability warning-the black bar safety net

One, Foreword Zhiyuan OA system by the Beijing Zhiyuan Internet Software Co., Ltd. development, is an Internet-based collaboration the collaborative management software in the enterprise agencies is widely used. Recent Zhiyuan OA system is broke there is an arbitrary file write vulnerability has...

SQL Injection Vulnerability in Websiteid Parameter of Government Information System of Beijing Xiangyu Leading Software Co.

One-stop government information disclosure system is a management system that realizes the construction of open government columns based on website groups. There is a SQL injection vulnerability in the websiteid parameter of the one-stop government information disclosure system of Beijing Xiangyu...

JVN#01167429: OpenWnn for Android vulnerable to information disclosure

OpenWnn provided by OMRON SOFTWARE Co., Ltd. is a Japanese Input Method Editor IME. OpenWnn for Android contains an issue in the access permissions for certain files. Impact If a user of the affected product uses other malicious Android application, information managed by the affected product may...

KindEditor 4.1.2 (name parameter) Reflected XSS Vulnerability

Summary KindEditor online HTML editor is a set of open source, mainly for users on the site to get WYSIWYG editing effects, developers can replace the traditional multi-line text input box textarea KindEditor rich visualization text input box. Description KindEditor is prone to a reflected...

JVN#43386477: WeblyGo vulnerable to cross-site scripting

WeblyGo is a groupware provided by KAWAI BUSINESS SOFTWARE CO., LTD. KBS. WeblyGo contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by...

AlgoPars Software Co SQL Injection

||------------------------------------------------------------------|| ||Software..............AlgoPars Software Co ||Vulnerability.........Sql Injection ||Threat Level..........High ||Vender................www.algopars.ir ||Author................Bl4ck.Viper Turkish Hacker...