Arbitrary File Deletion Vulnerability in CMS

ETA CMS is a simple, practical and efficient website builder. ETA CMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete configuration files...

SQL injection vulnerability in ne***.asp page di*** parameter and pr***.php page di*** parameter of website building system of Shenzhen Dr. Tong Technology Co.

Ltd. is an Internet infrastructure operator engaged in website construction, website optimization and Internet marketing. There is a SQL injection vulnerability in the ne.asp page di parameter and pr.php page di parameter of the website building system of Shenzhen Dr. Tong Technology Co. Ltd. whi...

XSS Vulnerability in Xiamen Techflood Software Co.

Xiamen Techflood Software Co., Ltd. is a high-tech enterprise dedicated to the research and development of "Internet + Education" technology. XSS vulnerability exists in Xiamen Techflood's website builder system, which can be exploited by attackers to construct malicious js code and obtain user...

XSS Vulnerability in OurPHP Orad website builder system

OurPHP Aopia website building system is a enterprise + e-commerce marketing website building system. There is an XSS vulnerability in the OurPHP website builder system, which can be exploited by attackers to obtain administrator cookie information...

Changsha Tian Er Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities

Changsha Tian Er Network Technology Co., Ltd. is a technology-based development company. Changsha Tian Er Network Technology Co., Ltd. has a SQL injection vulnerability in its website builder system, which can be exploited by attackers to obtain sensitive information from the database...

Xi'an Baolian Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2020-25104)

Xi'an Bailian Network Technology Co., Ltd. is a technology-based company specializing in electromechanical enterprise management software development and website design. Xi'an Bailian Network Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by...

SQL Injection Vulnerability in Website Building System of Qinhuangdao Shangjing Technology Company Limited (CNVD-2020-24437)

Qinhuangdao Business View Technology Co., Ltd. was founded in 2001, customized website, network marketing as one of the network service company. A SQL injection vulnerability exists in the website building system of Qinhuangdao Business View Technology Limited, which can be exploited by attackers...

Command Execution Vulnerability in DouFox

DouFox is a PHP and MySQL based website builder. DouFox has a command execution vulnerability that can be exploited by attackers to execute malicious code...

XSS Vulnerability in E-Orange Internet Display System

Easy Orange Internet is a dedicated Internet information service provider. An XSS vulnerability exists in EOrange Internet's display website builder system, which can be exploited by attackers to inject arbitrary Web script or HTML...

SQL injection vulnerability in ab***.php page of website building system of Jinan Cabbage Network Technology Co.

Cabbage Network was founded in 2014, the company's main website construction domain name registration, web hosting, web design, program custom development, technology outsourcing, WAP mobile site construction, micro letter and small program custom development, system UI and graphic design, PHP...

SQL Injection Vulnerability in YCCMS

YCCMS is a PHP version of a lightweight website building system. YCCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Arbitrary file deletion vulnerability in ourphp

OurPHP Aopia website builder is a enterprise + e-commerce marketing website builder system. OurPHP has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

SQL Injection Vulnerability in Website Building System of Famous Torch Enterprise Management (Shanghai) Co.

Ltd, founded in 2005, is a domestic enterprise IT application service operator. A SQL injection vulnerability exists in the website building system of Famous Torch Enterprise Management Shanghai Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

Command Execution Vulnerability in ZZZCMS

zzcms is a free website builder developed in asp language. ZZZCMS has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

SQL injection vulnerability in the ab***.php page bi*** parameter of the website building system of Hefei Yilang Network Technology Co.

Hefei Yilang Network Technology Co., Ltd. is a company specializing in Internet technology services, development and application. Hefei a wave of network technology limited company to build a station system ab.php page bi parameters exist SQL injection vulnerability, an attacker can use the...

SQL injection vulnerability in cl***.php page of website building system of Hubei Guosheng Technology Co.

Ltd. is a full-network value marketing service provider, to provide customers with comprehensive digital innovation services, to help traditional enterprises to realize the "Internet +" transformation and upgrading. There is a SQL injection vulnerability in the cl.php page of the website building...

SQL injection vulnerability in cp_***.php file of website building system of Henan Lisuo Internet Information Technology Co.

Henan LISO Internet Information Technology Co., Ltd. is a comprehensive Internet service organization that provides network solutions for enterprises to enhance the value of their Internet marketing. Henan Lishou Internet Information Technology Co., Ltd. building system cp.php file there is a SQL...

SQL Injection Vulnerability in Frontend of zzcms Website Building System

zzcms is a free website builder, featuring easy-to-use labels, a secure system core, and a good user experience. There is a SQL injection vulnerability in the frontend of zzcms, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in the us***.cl***.php file of YIXUNCMS enterprise website builder system

YIXUNCMS enterprise website construction system is a set of display website system developed by Yixun Software Studio for small and medium-sized enterprises. There is a SQL injection vulnerability in the us.cl.php file of YIXUNCMS enterprise website builder system. Attackers can use the...

SQL injection vulnerability in de***.php file of website building system of Beijing Shenghui Youlian Network Technology Co.

Beijing Shenghui Youlian Network Technology Co., Ltd. is a professional website construction organization in Beijing. A SQL injection vulnerability exists in the de.php file of the website building system of Beijing Shenghui Youlian Network Technology Co. An attacker can use the vulnerability to...