File Uploading Vulnerability in Nanjing Sage's Intelligent Management System for Experimental Teaching and Learning

Nanjing apex experimental teaching intelligent management system is designed for colleges and universities to establish a set of experimental teaching management mode of the system. There is a file upload vulnerability in Nanjing Centaur Experimental Teaching Intelligent Management System. An...

File Upload Vulnerability in Gxlcmsqy System

GxlcmsQY system is a simple program tailored for business users. A file upload vulnerability exists in Gxlcmsqy System. An attacker logging into the backend can upload backdoor files and gain control of the web server...

Zhejiang Dahua DSS 3.0 Security New Platform Exists struts2-045 Remote Code Execution Vulnerability

DSS Digital Surveillance System is a highly integrated and powerful digital surveillance management system developed by Zhejiang Dahua Technology Co. Zhejiang Dahua DSS 3.0 security new platform uses Apache Struts 2 as the web application framework, because the software has a remote code executio...

Joomla! Core XSS Vulnerability(CVE-2017-7985)

Joomla! is one of the world's most popular content management system CMS solutions. It enables users to build custom Web sites and powerful online applications. More than 3 percent of Web sites are running Joomla!, and it accounts for more than 9 percent of CMS market share. As of November 2016,...

Jackson-Databind framework json deserialization code execution vulnerability analysis-vulnerability warning-the black bar safety net

2017/04/11, ayound reported a Jackson Databind framework json deserialization vulnerability, an attacker exploit the vulnerability in the server on the host to execute arbitrary code or system commands, obtain the web server control. Affected versions: The jackson databind 2.7.10 and 2. 8. 9 The...

Backdoor Vulnerability in S-CMS

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS there is a backdoor vulnerability, the reason for this vulnerability is /conn/function.asp file encrypted sentence can be deformed into a Trojan horse caused by the password is the 32-bit md5 value...

Remote Code Execution Vulnerability in Classroom Teaching System

Classroom Client is software that assists primary and secondary school teachers in electronic lesson planning. A generic remote code execution vulnerability exists in the Bantong teaching system. An attacker can exploit the vulnerability to execute arbitrary code and gain control of the web serve...

JDWP Command Execution Vulnerability in Some IPs of ZDNT

ZDNT Customer Resource Management System is a foreign trade software that solves the key problems of foreign trade enterprises by focusing on customers. A JDWP command execution vulnerability exists in some IPs of ZDNT, which allows attackers to exploit the vulnerability to gain control of the we...

Java Deserialization Vulnerability in Apache Shiro

Apache Shiro is the United States Apache Apache Software Foundation for the implementation of authentication , authorization , encryption and session management of the Java security framework . Apache Shiro suffers from a Java deserialization vulnerability. An attacker can exploit the vulnerabili...

osTicketSQL.txt

GulfTech Security Research May 2nd, 2005 Vendor : osTicket URL : http://www.osticket.com/ Version : All Versions Risk : Multiple Vulnerabilities Description: osTicket is a widely-used open source support ticket system. It is a lightweight support ticket tool written mainly using PHP scripting...

CVE-2005-1909

The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting XSS vulnerability...

@(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function

//@ Mordred Security Labs advisory Release date: April 1, 2003 Name: Integer overflow in PHP strrepeat function Versions affected: all versions Risk: average Author: Sir Mordred [email protected] I. Description: PHP is a widely-used general-purpose scripting language that is especially suited fo...