Nanjing Guanbao Technology Development Co., Ltd. safety education and training information system has information leakage vulnerability

Nanjing Tube Bao Technology Development Co., Ltd. is a high-tech enterprise focusing on computer hardware and software research and development, sales, service and system integration. There is an information leakage vulnerability in the security education and training information system of Nanjin...

CVE-2024-11984 SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type

A unrestricted upload of file with dangerous type vulnerability in epaper draft function in Corporate Training Management System before 10.13 allows remote authenticated users to bypass file upload restrictions and perform arbitrary system commands with SYSTEM privilege via a crafted ZIP file...

XML Entity Injection Vulnerability in Training and Exam System of Beijing Yunfan Internet Technology Co.

Beijing Yunfan Internet Technology Co., Ltd. business scope includes: technology development, technology promotion, technology transfer, technology consulting, technical services and so on. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists XML entity injection...

Unauthorized Access Vulnerability in the Frontend of Smartstone Online Training and Learning System of Shijiazhuang Lingstone Technology Co.

Smartstone Online Training and Learning System is an online learning platform that integrates both passive training and active learning modes and supports multi-level authorization management. There is an unauthorized access vulnerability in the frontend of Smartstone Online Training and Learning...

U.S. Dept Of Defense: Online training material disclosing username and password

Summary: A training document is revealing username and password details for what appears to be a DoD training system Description: Using the google dork site:.mil ext:ppt intext:password, I was able to find a number of powerpoint documents on .mil websites that include username and passwords. This...

File Upload Vulnerability in the Frontend of Online Training System of Beijing Xinqi Technology Co.

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. A file upload vulnerability exists in the frontend of the online training system of Beijing Xinqi Technology Co., Ltd. that can be exploited by an...

SQL Injection Vulnerability in the Frontend of Online Training System of Beijing Xinqi Technology Co.

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. A SQL injection vulnerability exists in the frontend of the online training system of Beijing Xinqi Technology Co. An attacker can exploit the...

Arbitrary File Upload Vulnerability in the Frontend of Online Training System of Beijing Xinqi Technology Co.

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. An arbitrary file upload vulnerability exists in the frontend of the online training system of Beijing Xinqi Technology Co. The vulnerability allows a...

Stored Cross-site Scripting Vulnerability in the Frontend of Online Training System of Beijing Xinqi Technology Co.

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. A stored cross-site scripting vulnerability exists in the frontend of the online training system of Beijing Xinqi Technology Co. An attacker can inser...

Beijing Xinqi Technology Co., Ltd. online training system has an override access vulnerability in the frontend

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. A vulnerability exists in the frontend of the online training system of Beijing Xinqi Technology Co. An attacker can exploit the vulnerability to log ...

Days Bo online training system /Web_Org/Class_Info. aspx file couseid parameter SQL injection vulnerability

No description provided by source...

Days Bo online training system network school Edition Course_Class_List_Default. aspx the parameter cid SQL injection vulnerability

No description provided by source...

Days Bo online training system St_Son_Index. aspx, etc. 6 SQL injection vulnerability

No description provided by source...

上海天柏在线培训系统 /WebPage/Paying.aspx 等11处 SQL注入漏洞

No description provided by source...

某通用培训系统四处SQL注入漏洞

简要描述： 详细说明： 某通用培训系统四处SQL注入漏洞。 四处SQL注入： http://.../WebOrg/DdcbView.aspx?infoid=58 http://.../WebOrg/DdcbView.aspx?infoid=97 http://.../webOrg/AboutUs.aspx?infoid=a http://.../WebOrg/AboutUs.aspx?infoid=a http://.../WebOrg/QaQuertList.aspx?info=4123 http://.../WebOrg/QaQuertList.aspx?info=4139...

某在线培训系统通用SQL注入漏洞

简要描述： 详细说明： 某在线培训系统通用SQL注入漏洞。 http://.../WebOrg/TCHlist.aspx?typeid=9 http://.../WebOrg/TCHlist.aspx?typeid=9 http://.../WebOrg/TCHlist.aspx?typeid=9 http://.../WebOrg/TCHlist.aspx?typeid=9 http://.../WebOrg/TCHlist.aspx?typeid=9 http://.../WebOrg/TCHlist.aspx?typeid=9 漏洞证明：...

Online Training Management System Generalized Arbitrary File Download Vulnerability of Beijing Jianfeng Hexun Technology Co.

Peak Hutchinson's Online Training Management System is a software system that provides full-process management of training activities for learning organizations. There is a generic arbitrary file download vulnerability in the online training management system of Beijing Summit Hexun Technology Co...

某在线培训系统SQL盲注漏洞

简要描述： rt 详细说明： 官网站：http://.../Login.aspx 在注册用户，检测用户名是否存在 处存在POST注入！ 附：...:8000/ 一例 数据包如下： POST /CscAjax/ajax.aspx HTTP/1.1 Host: ... Proxy-Connection: keep-alive Content-Length: 63 Accept: text/html, / Origin: http://... X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 Windows NT 6.1; WOW...

pilotgroup-sql.txt

--==+================================================================================+==-- --==+ Pilot Online Training Solution Remote SQL Injection Vulnerbility +==-- --==+================================================================================+==--...