S-CMS enterprise website builder system/wapmember/post.asp page O_id parameter exists SQL injection vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. There is a SQL injection vulnerability in the Oid parameter of the /wapmember/post.asp page of the S-CMS enterprise website builder system. As the program fails to filter the data submitted by users, it...

SQL Injection Vulnerability in Topic Parameter of Zaoyang City Shanshui Digital Studio's Website Building System

Zaoyang Shanshui Digital Studio website building system is a website building system. A SQL injection vulnerability exists in the topic parameter of the Zaoyang City Landscape Digital Studio website builder system. Allow attackers to exploit the vulnerability to obtain sensitive information from...

Multiple SQL Injection Vulnerabilities in Zaoyang City Shanshui Digital Website Building System

Zaoyang Shanshui digital website builder system is a website builder system. SQL injection vulnerability exists in the index.php and subject.php pages of the Zaoyang City Shanshui Digital website builder system, as the program fails to filter user-submitted data, allowing attackers to exploit the...

SQL Injection and Reflective Cross-site Scripting Vulnerabilities in Topps Enterprise Website Builder System

Topps Network Technology Co., Ltd. is a network company that provides website construction and promotion services for enterprises in Suzhou and the surrounding areas. Topps enterprise website builder system suffers from SQL injection and reflective cross-site scripting vulnerabilities. Due to the...

SQL Injection Vulnerability in Zaoyang City Shanshui Digital Website Building System

Zaoyang City Landscape Digital Studio is a company that integrates website construction, software development, network marketing, graphic design, website operation, enterprise post office, space domain name service and film and television filming services. A SQL injection vulnerability exists in...

Visual Link Sharing Websites Builder Script 2.1.0 - SQL Injection

Visual Link Sharing Websites Builder Script 2.1.0 - SQL Injection Exploit Title: Flippy LinkShare – Visual Link Sharing Websites Builder Script v2.1.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

My Private Tutor Website Builder Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: My Private Tutor Website Builder Script Script Buy Now:...

My Private Tutor Website Builder Script - SQL Injection

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: My Private Tutor Website Builder Script Script Buy Now: http://www.popularclones.com/products/My-Private-Tutor-Website-Builder Author: Ihsan Sencan Author Web:...

Cross-site scripting vulnerability in 'index.php' page of DM website builder system

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. A cross-site scripting vulnerability exists in the 'index.php' page of the DM website builder system. The program fails to filter...

Stored Cross-site Scripting Vulnerability in s-cms Website Builder System

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. A stored cross-site scripting vulnerability exists in the S-CMS website builder system. Due to the lack of filtering on the /member/memberreg.asp page, an attacker can launch a...

Cross-site scripting vulnerability in the 'adminfrom.php' page of the DM website builder system

DM enterprise building system is developed by php + mysql for small and medium-sized enterprise website construction of a set of open source cms. A cross-site scripting vulnerability exists in the 'adminfrom.php' page of the DM website builder system. The program fails to filter user-supplied...

SQL Injection Vulnerability in Taiwan Yicheng Web Design Company's Website Building System

Yee Seng Technology website building system is a content management system template developed by Yee Seng Technology in Taiwan. A SQL injection vulnerability exists in the num parameter in the show.php page of the ArtShing Technology website builder system, which can be exploited by attackers to...

File Containment Vulnerability in Minyou Website Builder System

Minyou web site building system is developed by java content management system is mostly used in government, school management system. The product's download.jsp page pathfile parameter exists arbitrary file download vulnerability, poc for: http://host/download.jsp?pathfile=/... /... /... /... /...

Default Backdoor Vulnerability in s-cms Website Builder System

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. There is a default backdoor vulnerability in s-cms website builder system. Allow attackers to directly obtain site or server permissions...

Shenzhen Dingcheng Internet Technology Co., Ltd. official website builder system SQL injection vulnerability

Enterprise official website building system provides a variety of website data system, each site according to different characteristics and industries to choose, Dingcheng network independent development of the background program. Shenzhen Dingcheng Internet Technology Co., Ltd. official website...

Xiangtan Times Information Technology Co., Ltd. website building system has arbitrary file upload vulnerability

Xiangtan Times Information Technology Co., Ltd. is an IT application service company, providing IT application services and e-commerce solutions. Xiangtan Times Information Technology Co., Ltd. website building system has an arbitrary file upload vulnerability, which can upload script files to...

SQL Injection Vulnerability in Generalized Website Building System of School Worry-free Software Technology Co.

Schoolfree Software Technology is an educational software teaching application research and system development company. A SQL injection vulnerability exists in the generic website builder system of School Worry Free Software Technology Ltd. The vulnerability allows attackers to utilize commonly...

Cmseasy website builder system has cross-site scripting vulnerability

cmseasy is a domestic commercial website builder system that is used for corporate website building. A vulnerability exists in the cmseasy backend code that does not properly filter dangerous characters, allowing attackers to exploit the vulnerability to conduct cross-site attacks...

Jimdo – Website Builder - Customized SSL, MIT license, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Jimdo – Website Builder published at the 'play' market has multiple vulnerabilities...

Website Builder for Android - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Website Builder for Android published at the 'play' market has multiple vulnerabilities...