SQL Injection Vulnerability in Shield Spirit Commodity Promotion System

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System (CNVD-2020-33194)

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

Command execution vulnerability in weiphp Ad***.cl***.php

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. A command execution vulnerability exists in weiphp Ad.cl.php, which can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in Lotus Coupon System

LOTUS Coupon System is a WeChat-based e-coupon operation and distribution system for merchants in the same city, which allows merchants to issue coupons online, underwrite online and realize the functions of underwriting as a member. There is a SQL injection vulnerability in the LODE Coupon Syste...

Chengdu Crazy Horse Crazy Horse Technology Co., Ltd Crazy Horse Fitness WeChat mini-program has a logic flaw vulnerability

Chengdu Crazy Horse Crazy Horse Technology Co. was founded on December 27, 2017 . The company's business scope includes: software research and development, technical development of network equipment, technical consulting, technical services, technology transfer and so on. Chengdu Crazy Horse Craz...

WeiPHP suffers from an information leakage vulnerability

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. WeiPHP suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Ziou Technology's Lotto Coupon System

LOTUS Coupon System is a WeChat-based e-coupon operation and distribution system for merchants in the same city. There is a SQL injection vulnerability in Ziou Technology's LODE Same Town Coupon System, which can be exploited by attackers to obtain sensitive information from the database...

Logic Flaw Vulnerability in Shop7 Online Shopping System Flagship Edition

Shop7 online shopping system flagship version is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer version and cell phone version and APP seamless combination of data as a whole. Shop7 online shopping system flagship version of the existence of logical flaws in...

XSS Vulnerability in WeiPHP of Shenzhen Yuanmeng Cloud Technology Co. Ltd (CNVD-2020-28790)

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP exists XSS vulnerability, attackers can use the vulnerability in the case of not logging in by inserting malicious j...

Shenzhen Yuanmeng Yun Technology Co., Ltd. WeiPHP has arbitrary file deletion vulnerability

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. Shenzhen Yuanmeng Cloud Technology Co. WeiPHP has an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files on t...

Unauthorized Access Vulnerability in Grindstone Reading App

Grindstone Reading App is a reading software. Unauthorized access vulnerability exists in Grinding Iron Reading APP. An attacker can use the vulnerability to obtain the transaction information of WeChat Payment backend...

Weiphp 5.0 beta frontend Ma***.php page has XSS vulnerability

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. An XSS vulnerability exists in the Weiphp 5.0 beta frontend Ma.php page. An attacker can use this vulnerability to insert malicious js code to obtain user...

WeChat PC version suffers from dll hijacking vulnerability

WeChat for PC is a cross-platform communication tool. WeChat PC version suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

Microdistribution has a flawed logic vulnerability

Micro Distribution is a WeChat distribution platform tailored for businesses. Micro distribution has a logic flaw vulnerability, an attacker can use the vulnerability to overstep the right to modify the entire network of users' shipping address information...

SQL Injection Vulnerability in Guangzhou Sanjin Network Technology Co.

Guangzhou Sanjin Network Technology Co., Ltd. company is a high-tech technology enterprises in Guangdong Province was founded in May 2014, is the enterprise WeChat distribution platform, website construction service providers. Guangzhou Sanjin Network Technology Co., Ltd. website building system...

File Upload Vulnerability in LaiKe Full Scene E-commerce System

LaiKe full-scene e-commerce system is a WeChat applet e-commerce platform front and back end open source PHP , including distribution , group , lottery , red packets , nine-grid game and other functions , the entire system architecture is very simple , suitable for small teams or individual...

File Upload Vulnerability in LaiKe Full Scene Ecommerce System

LaiKe full-scene e-commerce system is a WeChat small program e-commerce platform front and back end open source PHP, including distribution, group, lottery, red packets and other functions , the entire system architecture is very simple , suitable for small teams or individual developers secondar...

SQL Injection Vulnerability in Micro Edge Live of Shenzhen Micro Edge Information Technology Co.

Shenzhen Micro Edge Information Technology Co., Ltd. is a WeChat third-party service for regional self-publishers, and has released six categories of products: dating, matchmaking, live broadcasting, recruitment, real estate, and carpooling. A SQL injection vulnerability exists in Shenzhen Micro...

WeChat - Memory Corruption in CAudioJBM::InputAudioFrameToJBM Exploit

There is a memory corruption vulnerability in audio processing during a voice call in WeChat. When an RTP packet is processed, there is a call to UnpacketRTP. This function decrements the length of the packet by 12 without checking that the packet has at least 12 bytes in it. This leads to a...

WeChat - Memory Corruption in CAudioJBM::InputAudioFrameToJBM

There is a memory corruption vulnerability in audio processing during a voice call in WeChat. When an RTP packet is processed, there is a call to UnpacketRTP. This function decrements the length of the packet by 12 without checking that the packet has at least 12 bytes in it. This leads to a...