SQL Injection Vulnerability in E-Tech Website Construction System of Yanji Pilot High-Tech Development Co.

Yanji Pioneer Hi-Tech Development Co., Ltd. is a modernized company of computer software, hardware development and network service, electronic technology application and development. Now it has developed "E-technology website construction software", "E-technology e-commerce", "E-technology office...

yanji.gov.cn XSS vulnerability

Vulnerable URL: http://www.yanji.gov.cn/user/index.xhtml?menuid=236==705&cmd1;=content=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:12 GMT Vulnerability type:| XSS...