Oriental Resources Self-service Website - SQL Injection Vulnerability in Enterprise Website Management System

Enterprise Website Management System is an enterprise website based on PHP+MYSQL. An SQL injection vulnerability exists in Oriental Resources Self-service Website Builder - Enterprise Website Management System. The vulnerability is due to the system pkey parameter does not filter the data submitt...

Xuzhou Jinqiao Network Co., Ltd. website builder system has SQL injection vulnerability

Golden Bridge Network is a website builder. Xuzhou Jinqiao Network Co., Ltd. website builder system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection and Cross-site Scripting Vulnerabilities in Yitianlian's Enterprise Website Builder

Shenzhen Yitianlian Technology Co., Ltd. is a network operator providing online marketing services for enterprises. SQL injection and cross-site scripting vulnerabilities exist in the about.php and list.php parameters of the Yitianlian website builder system, which can be exploited by an attacker...

CSRF Vulnerability in AITO Website Builder System

AITU Network Technology Co., Ltd. is an information IT service company dedicated to website construction, portal, talent recruitment system development, software design, system development, and e-commerce applications. There is a CSRF vulnerability in the Love Road Network website builder system,...

SQL Injection Vulnerability in 'cate' Parameter of Aicheng Technology Website Building System

Chengdu Aicheng Technology Co., Ltd. is a collection of website planning, web design, website construction, network promotion seo keyword optimization, network integrated marketing and other business enterprises. There is a SQL injection vulnerability in the 'cate' parameter of the Aicheng...

SQL injection vulnerability of menuqx[1][6] parameter on roles.control.mydecms.php page of Xiancheng website builder system

Xiancheng building system is a set of PHP + mysql architecture with free open source article management system program. Xiancheng website builder system role.control.mydecms.php page menuqx16 parameter SQL injection vulnerability. Due to the system failing to effectively filter user-submitted dat...

SQL injection vulnerability in products.php page cid parameter of Shenzhou Tongda website builder system

ShenZhouTongDa network building system is a website building system. A SQL injection vulnerability exists in the cid parameter on the products.php page of the website builder system. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL injection vulnerability of cid parameter in category.control.mydecms.php page of Xiancheng website builder system

Xiancheng building system is a set of PHP + mysql architecture with free open source article management system program. Xiancheng website building system category.control.mydecms.php page cid parameter SQL injection vulnerability. As the system fails to effectively filter the data submitted by th...

SQL injection vulnerability in news-details.php page of Interactive Creation website builder system

Interactive Creative Xiamen Digital Technology Co., Ltd. is a brand website construction company in Fujian Province, "Interactive Creative" is one of its independent brands. A SQL injection vulnerability exists in the news-details.php page of the Interactive Creative website builder system. An...

SQL injection vulnerability in show.php, view.php and a.php pages of Shenzhen Yitianlian Technology Co.

Shenzhen Yitianlian Technology Co., Ltd. is a network operator providing online marketing services for enterprises. A SQL injection vulnerability exists in the show.php, view.php, and a.php pages of the website builder system of Shenzhen Yitianlian, which can be exploited by attackers to obtain...

SQL injection vulnerability in the cid parameter of list.php page of JiuJiu website builder system

Daqing JiuJiu Network Technology Co., Ltd. is a technical service enterprise diversified in the field of full network marketing, enterprise e-commerce, network information technology services. There is a SQL injection vulnerability in the cid parameter of the list.php page of the JiuJiu network...

SQL Injection Vulnerability in the Website Building System of Shanghai Interesting Dazzle Networks

Shanghai Interesting Dazzle Networks' website building system is a website building system. A SQL injection vulnerability exists in the website builder system of Shanghai Fun Dazzle Network. An attacker can exploit the vulnerability to obtain database information...

XIAOcms website builder system has file inclusion vulnerability

XiaoCms Enterprise Building Edition is based on PHP+Mysql architecture It is a small, flexible, simple and easy to use lightweight cms. A file inclusion vulnerability exists in the XIAOcms website builder system. An attacker can exploit this vulnerability to upload script files...

WonderCMS 2.1.0 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications document.forms0.submit; !-- Disclosure Timeline: --------------------- 2017-06-16: Vulnerability found. 2017-06-17: Reported to vendor. 2017-06-17: Vendor responded and send a new version for test in it. 2017-06-17: Test new version and...

Guilin DaCong Network Technology website builder system aid parameter SQL injection vulnerability

Guilin DaCong Network Technology website building system is a website building system with Guilin website construction and Guilin website promotion as the core business. SQL injection vulnerability exists in the parameters of Guilin DaCong Network Technology website building system aid, which can...

SQL Injection Vulnerability in Name Parameter of c9cms High-end Website Building System

C9CMS makes a free and open source enterprise building system. A SQL injection vulnerability exists in the name parameter of c9cms high-end website builder system. Attackers can use this vulnerability to obtain sensitive information in the database...

CSRF vulnerability exists in Aisooki enterprise website builder system V2.1

Aisok universal enterprise building system cicms is based on PHP + Mysql development of an enterprise website management system. CSRF vulnerability exists in Aisooker General Enterprise Website Builder System V2.1. An attacker can exploit this vulnerability to forge form links and trick...

SQL Injection Vulnerability in the ID Parameters of the Website Building System of Tianjin General Zhuoye Technology Co.

Tianjin General Zhuoye Technology Co., Ltd. station-building system is a station-building system that provides Tianjin website construction, Tianjin website promotion, network marketing integration services, website security solutions. There is a SQL injection vulnerability in the ID parameter of...

Liyang Jinlong Network Service Co., Ltd. website building system has XSS, ultra vires access vulnerabilities

Ltd. is a brand network company integrating creativity, planning, service and sales. There are XSS and transgression access vulnerabilities in the website building system of Liyang Golden Dragon Network Service Co. Attackers can use this vulnerability to insert XSS cross-site code in the message...

Storage-based Cross-site Scripting Vulnerability in Aisook General Enterprise Website Builder System

Aisok universal enterprise building system cicms is based on PHP + Mysql development of an enterprise website management system. A storage-based cross-site scripting vulnerability exists in the Aisook General Enterprise Website Builder System. The vulnerability is caused by the message function...