SQL injection vulnerability in the pro*** page of the website building system of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a comprehensive network technology company founded on website construction, software development and promotion marketing. Henan leap dragon door science and technology limited company builds the station system pro page exists SQL injection loophole, the...

File upload vulnerability in uublog

uublog is a lightweight website builder. A file upload vulnerability exists in uublog, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Website Building System of Guangzhou Huanuo Computer Technology Co.

Guangzhou Huanuo Computer Technology Co., Ltd. is committed to creating specialized, personalized, branded network services. Guangzhou hunuo computer science and technology limited company station building system file upload vulnerability, attackers can use the vulnerability to upload malicious...

SQL Injection Vulnerability in Nanjing Suiteng Network Technology Co.

Nanjing Suiteng Network Technology Co., Ltd. is a company specializing in Internet brand building. There is a SQL injection vulnerability in the website building system of Nanjing Suiteng Network Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information from the...

SQL Injection Vulnerability in Website Building System of Suzhou Tianxiao Network Technology Co.

Suzhou Tianxiao Network Technology Co., Ltd. is a company engaged in software development, network information services and management of office automation equipment. Suzhou Tianxiao Network Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be...

Wuhu ECCOM Information Technology Co., Ltd. website building system has SQL injection vulnerability

Wuhu eXpress Information Technology Co., Ltd. is an Internet application service solution provider. There is a SQL injection vulnerability in the website building system of Wuhu ECCOM Information Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information from the...

Page Builder: PageLayer - Drag and Drop website builder < 1.1.2 - CSRF leading to XSS

A flaw allowed attackers to forge a request on behalf of a site’s administrator to modify the settings of the plugin which could allow for malicious Javascript injection...

Page Builder: PageLayer - Drag and Drop website builder < 1.1.2 - Unprotected AJAX's leading to XSS

Nearly all of the AJAX action endpoints in this plugin failed to include permission checks allowing these actions to be executed by anyone authenticated on the site. The greatest impact was the pagelayersavecontent function that allowed pages to be modified and XSS to occur. PoC $wpuser, 'pwd' =...

Page Builder: PageLayer - Drag and Drop website builder < 1.1.2 - CSRF leading to XSS

A flaw allowed attackers to forge a request on behalf of a site’s administrator to modify the settings of the plugin which could allow for malicious Javascript injection. PoC...

SQL injection vulnerability in the ***se.asp page of the website building system of Zhongshan Cohesion Network Technology Co.

Zhongshan Cohesion Network Technology Co., Ltd. is a company dedicated to Internet branding and Internet marketing. Zhongshan Cohesion Network Technology Co., Ltd. station building system se.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

Code execution vulnerability exists in ESPCMS (CNVD-2020-32575)

ESPCMS is a free and professional enterprise website building system. A code execution vulnerability exists in ESPCMS, which can be exploited by attackers to execute malicious code and obtain server administrative privileges...

XSS Vulnerability in Tianniu Website Builder System

Tianniu website builder is an extremely fast online website builder platform. An XSS vulnerability exists in the Tianniu website builder system, which can be exploited by an attacker to obtain user cookie information...

File Upload Vulnerability in Hangzhou Vickers Club Network Technology Co.

Hangzhou Vickers Club Network Technology Co., Ltd. is a website builder. A file upload vulnerability exists in the website builder system of Hangzhou Vickers Club Network Technology Co. Ltd, which can be exploited by attackers to upload arbitrary files...

Arbitrary File Download Vulnerability in Website Management System of Hangzhou Viking Club Network Technology Co.

Hangzhou Vickers Club Network Technology Co., Ltd. is a website builder. Hangzhou Vickers Club Network Technology Co., Ltd. website builder management system suffers from an arbitrary file download vulnerability, which can be exploited by an attacker to download arbitrary files...

SQL Injection Vulnerability in Qingdao Huishang Media Co.

Qingdao Hui Shang Media Co., Ltd, is an operator that provides companies with services such as online marketing, brand design, micro-marketing, and software customization and development. There is a SQL injection vulnerability in Qingdao Hui Shang Media Co., Ltd's website building system, which c...

XSS Vulnerability in S-CMS Enterprise Website Builder System

S-CMS is a set of asp/php based enterprise building system CMS. An XSS vulnerability exists in S-CMS enterprise website builder system, which can be exploited by an attacker to obtain an administrator cookie...

XSS Vulnerability in Chinese Online Digital Publishing Group Co.

Bookish China Station Building System is a reading platform that actively serves the development of national reading activities and extends to primary and secondary schools as well as colleges and universities and public libraries. There is an XSS vulnerability in the Chinese Online Digital...

SQL Injection Vulnerability in the Website Building System of Suzhou Topps Network Technology Co.

Suzhou Topps Network Technology Co., Ltd. is engaged in solving the website construction, Baidu promotion, Baidu bidding hosting, Ali network marketing treasure hosting, optimization station rental and sale. Suzhou Topps Network Technology Co., Ltd. station building system there is a SQL injectio...

SQL injection vulnerability in the co***.php page of the website building system of Hubei Guosheng Technology Co.

Ltd. is a full-network value marketing service provider, to provide customers with comprehensive digital innovation services, to help traditional enterprises to realize the "Internet +" transformation and upgrading. There is a SQL injection vulnerability in the co.php page of the website building...

SQL Injection Vulnerability in Hop-Up Website Building System (CNVD-2020-31569)

Founded in 2007, HYN is a comprehensive enterprise specializing in providing customers with a series of enterprise services such as website, mailbox, advertisement, software, finance and tax. There is a SQL injection vulnerability in the website builder system of Hop-Up Network, which can be...