SQL Injection Vulnerability in Website Building System of Suzhou Topps Network Technology Company Limited (CNVD-2021-27655)

Suzhou Ernst Network Technology Co., Ltd. is a company that provides medium and high-end website design, graphic design, program development and internet marketing. There is a SQL injection vulnerability in the website building system of Suzhou Topps Network Technology Co. Ltd, which can be...

File Upload Vulnerability in WoSmith Customer Service System

Zhejiang WoSmith Information Technology Co., Ltd. is a technology company specializing in mobile Internet technology development. There is a file upload vulnerability in WoSmith's customer service system, which can be exploited by attackers to gain control of the server...

Unauthorized Access Vulnerability in ThinkApe Systems

Scope ®️ belongs to Shanghai Yingce Information Technology Co. It is a financial shared service solution provider in China. An unauthorized access vulnerability exists in the ThinkApe system, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Isthmus Electronic Document Security Management System

Electronic document security management system referred to as: CDG is an electronic document security protection software, the system utilizes the driver layer transparent encryption technology, through the encryption and protection of electronic documents, to prevent the internal staff leakage a...

SQL Injection Vulnerability in the Website Building System of Shanghai Cai Sheng Information Technology Co.

Shanghai Cai Sheng Information Technology Co., Ltd abbreviated as: "Cai Sheng Planning" was founded in 2005, is a digital marketing as the core of the integrated marketing services company. There is a SQL injection vulnerability in the website building system of Shanghai CaiSheng Information...

SQL Injection Vulnerability in the Website Building System of Suzhou Topps Network Technology Co.

Suzhou Topps Network Technology Co., Ltd. business scope: computer network engineering, communications engineering, security engineering, traditional industries in the use of high-tech technology, electronic computers and electronic technology information, computer accessories and peripheral...

Logic Flaw Vulnerability in the Basic Platform Management System of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. A logic flaw exists in the management system of the basic platform of Beijing Zhongchuang Vision Technology Co. An attacker can exploit the vulnerability by replacing the...

SQL Injection Vulnerability in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co.

The Campus Payment Platform is developed by Beijing DIKE Farsighted Technology Co., Ltd. to solve various problems in payment of fees in colleges and universities, to reduce the workload of school financial managers, and to facilitate all kinds of fee-paying personnel both inside and outside the...

SQL Injection Vulnerability in LAC WEB Control Center of Shanghai Huanchuang Communication Technology Co.

GBCOM is a high-tech company focusing on technical research, product development and sales in the field of wireless broadband communication with WiFi technology as its core. A SQL injection vulnerability exists in the LAC WEB Control Center of Shanghai Huanchuang Communication Technology Co., Ltd...

Command Execution Vulnerability in Tenda AX3000 Dual Band Gigabit WI-FI 6 Wireless Router

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Command execution vulnerability exists in Tenda AX3000 Dual Band Gigabit WI-FI 6 Wireless Router, which can be exploited by an attack...

Groups Call for Ethical Guidelines on Location-Tracking Tech

The Locus Charter asks companies to commit to 10 principles, including minimizing data collection and actively seeking consent from users...

SQL Injection Vulnerability in Website Building System of Henan Fangguo Electronic Technology Co.

Henan Fangguo Electronic Technology Co., Ltd. is a website construction, WeChat mall, WeChat development of science and technology marketing enterprises. Henan Fangguo Electronic Technology Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerability to...

Guangzhou Jiuan Intelligent Technology Co., Ltd JA7208 Has Logic Flaw Vulnerability

Guangzhou Jiuan Intelligent Technology Co., Ltd. is a leading global provider of mobile mapping infrastructure and IoT platform. A logic flaw vulnerability exists in JA7208 of Guangzhou Jiuan Intelligent Technology Company Limited, which can be exploited by an attacker to bypass login...

Command Execution Vulnerability in SongCMS PHP Version of Guangdong Kegel Technology Co. Ltd (CNVD-2021-24956)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the PHP version of SongCMS by Guangdong Kege...

SQL Injection Vulnerability in SongCMS PHP Version of Guangdong Kegel Technology Limited (CNVD-2021-24953)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A SQL injection vulnerability exists in the PHP version of SongCMS by Guangdong Kager...

SQL Injection Vulnerability in Equipment Management Platform of Shenzhen Tengxu IOT Technology Co.

Shenzhen Tengxu IOT Technology Co., Ltd. is an Internet technology company integrating R&D, design, manufacture, sales and service of commercial wireless network products. Shenzhen Tengxu IOT Technology Co., Ltd. device management platform has a SQL injection vulnerability, which can be exploited...

SQL Injection Vulnerability in Teleconferencing System of Beijing Dexit Technology Co.

The conference call system is an integrated EasyMeeting Web to realize the integration of teleconferencing and web conferencing, and will be integrated with Microsoft, IBM and other industry mainstream office applications. There is a SQL injection vulnerability in Beijing Dexit Teleconference...

SQL injection vulnerability in co***.php page of Harbin Qixun Technology Co.

Harbin Qixun Technology Co., Ltd. is an Internet enterprise specializing in small and medium-sized enterprise network marketing outsourcing. Harbin Qixun Technology Co., Ltd. building system co.php page there is a SQL injection vulnerability, attackers can use the vulnerability to obtain database...

Arbitrary File Read Vulnerability in HIM Basic Management Platform of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is an arbitrary file reading vulnerability in the HIM basic management platform of Beijing CCTV Technology Co., Ltd, which can be exploited by an attacker to read all t...

Command Execution Vulnerability in SongCMS PHP Version of Guangdong Kegel Technology Co.

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the PHP version of SongCMS by Guangdong Kege...