Weak Password Vulnerability in TP-LINK Archer-C7 Router

P&T Technologies Ltd. is a leading global provider of network communication equipment. A weak password vulnerability exists in the Archer-C7 router, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...

Weak password vulnerability in TP-LINK TL-WR743ND router

P&T Technologies Ltd. is a leading global provider of network communication equipment. A weak password vulnerability exists in the TL-WR743ND router, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...

Weak Password Vulnerability in Telecom Gateway Configuration Management System

Shenzhen Huashimida Information Technology Co., Ltd. is a collection of research and development, production, sales, installation and service in one of the professional interactive video high-tech enterprises. A weak password vulnerability exists in the telecom gateway configuration management...

Weak password vulnerability in H3C GR2200 routers

The H3C GR2200 router is an enterprise-class router. A weak password vulnerability exists in the H3C GR2200 router. An attacker can exploit this vulnerability to log into the system backend and obtain sensitive information...

SQL Injection Vulnerability in ASK2 Q&A System Backend uid Parameter

ask2 Q&A system is whatsns product community, providing free version of the open source php Q&A system, integration of paid Q&A system, paid voice Q&A system, comes with a super collection of features, rapid station building, powerful seo optimization. ASK2 Q&A system background uid parameters...

Rice Shell enterprise website system backend exists arbitrary file reading vulnerability

Rice Shell enterprise station building system is a tailor-made for enterprises, webmasters, developers, network companies, VI planning and design companies, SEO promotion and marketing companies, website beginners and other users of a new enterprise station, content management system, services fo...

Code Execution Vulnerability in FastAdmin System Backend

FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend code execution vulnerability, an attacker can exploit the vulnerability to obtain server privileges...

Arbitrary File Deletion Vulnerability in FastAdmin System Backend

FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...

SQL Injection Vulnerability in Sl***_St***.aspx of Bid 1.0 Backend of Qixing Engineering Bidding System

Qixing Bidding System is suitable for enterprises to collect information on government procurement, engineering construction, land grant and other bidding information, and to track the progress of works and payment of successful projects. QiStar Engineering Bidding System Bid 1.0 backend SlSt.asp...

Weak Password Vulnerability in AppEx CRE Smart Acceleration Gateway

AppEx is a full line of application delivery, WAN acceleration, and Internet acceleration hardware and software products. A weak password vulnerability exists in AppEx CRE Smart Acceleration Gateway. An attacker is allowed to log in to the system backend using the default weak password to gain...

Weak Password Vulnerability in Netnifty Security Management System - Log Audit System by Default

Netnifty Security Management System - Log Audit System hereinafter referred to as Leadsec-RS is a security product for information system log auditing. A weak password vulnerability exists in the Leadsec-RS. The system administrator account password is: sysadmin/leadsec.sysadmin allows an attacke...

FortiGate Firewall Has Design Flaw Vulnerability

FortiGate Fita Firewall is a network firewall product from Fortinet Fita for defense against attacks such as network and malicious code at the network and content layers. FortiGate Firewall has a design flaw vulnerability. It allows attackers to obtain sensitive information, log in to the system...

ariacms 系统后台任意文件上传漏洞

试了几次上传点都是失败，后来发现这里可以传压缩包。发现上传点。数据库必须以cbd3d20160112hnX8NP1.php这样命名。否则会提示恢复失败 恢复数据库，命名好的php会自动解压。直接解压到wwwroot/admin/databack/sql目录内，运行即可。...

Espcms V5.6.13.04.22 UTF8 正式版后台逻辑验证错误漏洞之2/N

简要描述： 系统后台权限逻辑校验存在问题，导致后台某模块功能被绕过和非授权访问 详细说明： 后台管理员权限校验在文件\public\classconnector.php: function adminpurview if $this-fun-accept'archive', 'R' == 'filemanage' && $this-fun-accept'action', 'R' == 'batupfilesave' $ecispadmininfo = $this-fun-accept'ecispadmininfo', 'G'; $esppowerlist =...