Nantong Baidu's website builder system suffers from SQL injection vulnerability

The business scope of Nantong Shouping Information Technology Co., Ltd. includes: research and development and sales of computer software and hardware; Internet technology services, etc. There is a SQL injection vulnerability in the website building system of Nantong Baidu Company, which can be...

CVE-2020-36171

The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG uploads...

CVE-2020-36171

The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG uploads...

CVE-2020-36171

CVE-2020-36171 concerns the Elementor Website Builder plugin for WordPress. Affected: WordPress plugins prior to version 3.0.14 . Root cause: incomplete validation/restriction of uploaded SVG files, enabling potentially unsafe SVG uploads. Reported impact includes security concerns such as possib...

SQL injection vulnerability exists in zzzzphp (CNVD-2020-75207)

zzcms is a free website builder. SQL injection vulnerability exists in zzzphp. An attacker can exploit the vulnerability to obtain sensitive database information...

Unauthorized Access Vulnerability in Phisung House Website Building System

Phaethon House is an online notebook for operators and maintainers. An unauthorized access vulnerability exists in the Phaidon House builder system, which can be exploited by an attacker to arbitrarily edit site content...

File Upload Vulnerability in Phisung House Website Building System

Phaethon House is an online notebook for operators and maintainers. A file upload vulnerability exists in the Phaidon House builder system that can be exploited by an attacker to gain control of the server...

Changsha Mito Information Technology Co., Ltd. enterprise website building system suffers from arbitrary file reading vulnerability

Changsha Mito Information Technology Co., Ltd. enterprise station-building system is a suitable for enterprise station-building open source free CMS station-building system. Changsha Mito Information Technology Co., Ltd. enterprise website builder system has an arbitrary file read vulnerability,...

SQL Injection Vulnerability in Toonhill Studio's Website Building System

Toonhoe Studios is an internet solution provider and website development company. A SQL injection vulnerability exists in the Toonhide Studio website builder system, which can be exploited by attackers to obtain database information...

SQL Injection Vulnerability in Website Building System of Yuanqi Technology (Beijing) Co.

Ltd. was founded in May 2014, is committed to become a "private cloud-based service provider of a new generation of enterprise information management system". A SQL injection vulnerability exists in the website building system of Yuanqi Technology Beijing Co., Ltd, which can be exploited by...

SQL Injection Vulnerability in in***.do Page of Website Building System at Shanghai BeltLeader Information Technology Co.

Ltd. is a new technology company based on independent innovation, to provide enterprises with the most valuable Internet products and services. A SQL injection vulnerability exists in the in.do page of the website building system of Shanghai BeltLeader Information Technology Co. An attacker can...

Jindao Information Technology (Shanghai) Co., Ltd T - SITE Enterprise Intelligent Website Building System has Arbitrary File Download Vulnerability

Jindao Information Technology Shanghai Co., Ltd Jindao for short, Jindao since its inception, focusing on digital marketing technology, products, services, resources, innovation and integration, has now formed the world's leading SaaS Intelligent Marketing Cloud Platform www.71360.com, the...

Diveshlunker Bloodx SQL注入漏洞

Diveshlunker Bloodx is a Php-based website builder for blood bank management by the individual developer Diveshlunker. BloodX version 1.0 suffers from a SQL injection vulnerability that can be exploited by attackers to bypass authentication...

WonderCMS 3.1.3 - 'Menu' Persistent Cross-Site Scripting

Exploit Title: WonderCMS 3.1.3 - 'menu' Persistent Cross-Site Scripting Date: 20-11-2020 Exploit Author: Hemant Patidar HemantSolo Vendor Homepage: https://www.wondercms.com/ Version: 3.1.3 Tested on: Windows 10/Kali Linux Contact: https://www.linkedin.com/in/hemantsolo/ CVE: CVE-2020-29469 Attac...

SQL Injection Vulnerability in Enping Wanshang Web Design Studio's Website Building System

Enping Wanshang Web Design Studio was founded in September 2016, and its business scope includes web design and website construction. There is a SQL injection vulnerability in the website building system of Wanshang Web Design Studio in Enping City, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Chongqing Billion Information Technology Co.

Ltd. referred to as: billion online, Chongqing billion is dedicated to brand website construction, Internet application development and network marketing, website construction is an important step in network marketing, according to the purpose of the enterprise's station, the overall positioning ...

WordPress Elementor Website Builder plugin <= 3.0.13 - Unrestricted SVG Uploads vulnerability

Unrestricted SVG Uploads vulnerability found in WordPress Elementor Website Builder plugin versions = 3.0.13. Solution Update the WordPress Elementor Website Builder plugin to the latest available version at least 3.0.14...

Shijiazhuang Renaud Network Technology Co., Ltd. website building system has a denial of service vulnerability

Shijiazhuang Renaud Network Technology Co., Ltd. was founded in 2008, 12 years focusing on the application of Internet and information technology to help China's economic transformation and upgrading. Shijiazhuang Renaud Network Technology Co., Ltd. station building system there is a denial of...

Beijing Yunmeng Network Technology Co., Ltd. website building system has logical flaws and vulnerabilities

Beijing Yunmeng Intelligent Technology Co., Ltd hereinafter referred to as Yunmeng is a well-known provider of cloud computing software applications in China. There is a logic flaw vulnerability in the website building system of Beijing Yunmeng Network Technology Co. Attackers can utilize the...

SQL Injection Vulnerability in the Website Building System of Beijing Zhongcheng Kexin Technology Development Co.

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the website building system of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain sensitive...