56796 matches found
农友政务系统 /ckq/slview.aspx 参数CountryName SQL注入漏洞
No description provided by source...
蝉知CMS system/module/message/control.php SQL注入
No description provided by source...
农友政务系统 /ckq/jwhkzjdlist.aspx文件CountryName参数SQL注入漏洞
No description provided by source...
农友政务系统 /bmfw/jwhzdlist.aspx文件zd参数SQL注入漏洞
No description provided by source...
国泰新电软件通用型门户网站群系统多处SQL注入漏洞
No description provided by source...
Internet Explorer 11 安全机制绕过漏洞
No description provided by source...
PLC路由器任意文件遍历下载
No description provided by source...
网达信联电子采购系统 /epro/ebid/viewInvite1.asp 文件 InviteId 参数SQL注入漏洞
No description provided by source...
Haidao网店系统 /www/appliaction/Controller/User/OrderController.class.php等4处SQL注入
No description provided by source...
Farmers-government system /ckq/hnzcout. aspx file CountryName parameter SQL injection vulnerability
No description provided by source...
IBOS协同办公系统misc.php SQL注入
No description provided by source...
Schneider Electric PowerLogic PM8ECC 模块未授权访问漏洞
PowerLogic PM8ECC是800 PowerMeter系列设备的通讯模块。根据施耐德电气描述, PowerLogic PM8ECC部署于商业设施部门并已在全世界广泛使用。 漏洞描述： 1.访问/status.htm页面。在没登录的情况下发现“User”处有一字符串； 2.以该字符串作为用户名和密码即可登录该设备的Web管理界面和FTP（如有），虽然用户列表中无该用户。...
悟空CRM App\Lib\Action\BusinessAction.class.php SQL注入
No description provided by source...
Swagger 通过参数注入远程代码执行漏洞
详情来源： R7-2016-06 This disclosure will address a class of vulnerabilities in a Swagger Code Generator in which injectable parameters in a Swagger JSON or YAML file facilitate remote code execution. This vulnerability applies to NodeJS, PHP, Ruby, and Java and probably other languages as well. Othe...
seacms /htdocs/seacms/member.php id参数 SQL注入
No description provided by source...
metinfo v5.3 /news/news.php 参数serch_sql SQL盲注漏洞
No description provided by source...
MetInfo 5.3.4 /member/login.php SQL注入
No description provided by source...
Haidao网店系统 /appliaction/Controller/User/CouponsController.class.php等2处SQL注入
No description provided by source...
WordPress Like Dislike Counter 1.2.3 插件 SQL注入漏洞
No description provided by source...
ZTE Management system网关设备通用型2处任意文件下载漏洞
No description provided by source...
PHPOA V4. 0 /phpoa/upload/index.php arbitrary file upload vulnerability
No description provided by source...
Schoolhos CMS 2.29 Parameter kelas SQL injection vulnerability
No description provided by source...
PcManFtp DELE command buffer overflow vulnerability
No description provided by source...
Blue Ling EIS wisdom collaboration platform /MobileApp/login. aspx injection vulnerability
No description provided by source...
Blue Ling EIS wisdom collaboration platform /vote/service. aspx injection vulnerability
No description provided by source...
Blue Ling micro applications CMS /basic/usermanager/sysOrgUser/login fdName parameter SQL injection vulnerability
No description provided by source...
Blue Ling EIS wisdom collaboration platform /sm/menu_left_edit. aspx injection vulnerability
No description provided by source...
phpoa upLoadOfficeFile.php 任意文件上传漏洞
No description provided by source...
PcManFtp the LS command buffer overflow
No description provided by source...
WordPress Mobile Detector <=3.5 resize.php the src parameter local file include vulnerability
No description provided by source...
Lws-Construction Management actualites.php parameters id_actualite SQL injection vulnerability
No description provided by source...
ETMV9 digital campus platform any download
No description provided by source...
seacms /htdocs/seacms/reg.php ip参数 SQL注入
No description provided by source...
网视领航电视台在线播放系统 /t/t1/user/bkzjsplb.aspx 参数 bkzjid SQL注入漏洞
No description provided by source...
Zhejiang uniview technologies security(DVR/NVR)and other monitoring equipment command execution
In file /Interface/DevManage/VM.php in: code area .............. Code omitted.................... // Set the DNS to resolve the server address case 'setDNSServer' : shellexec'echo "nameserver '. 'DNSServerAdrr'.'"'.' /etc/resolv. conf'; 'Code' = 0; getTip; echo jsonencode; break; default :...
Web interface for DNSmasq / Mikrotik - SQL Injection
No description provided by source...
Days Bo online training system /Web_Org/Class_Info. aspx file couseid parameter SQL injection vulnerability
No description provided by source...
SG8000 large rotating machine monitoring system /app/sg8k_rs/config/defaultuser.xml the system Super administrator account password information disclosure
No description provided by source...
S8000 rotating machinery online condition monitoring and analysis system weak password
No description provided by source...
S8000 rotating machinery online condition monitoring and analysis system /default. asp parameter username injection vulnerability
No description provided by source...
The new coordinates of the digital campus system AreaTeacherInfo. aspx SQL injection vulnerability
No description provided by source...
phpaaCms message.php SQL Injection Vulnerability
No description provided by source...
Days thaw letter TopADS system policy.mds.php arguments t_name SQL injection vulnerability
No description provided by source...
phpaaCms search.php SQL Injection Vulnerability
No description provided by source...
MyCnCart /admin/baidu/pushurl.php pushurl_id parameter SQL injection
No description provided by source...
Dokeos 2.2.1 - Blind SQL Injection
No description provided by source...
TodayMail email system/webmail/tools/cardList. php file sort_by parameter SQL injection vulnerability
No description provided by source...
Digital Campus2. 0 digital campus platform VideoManager. aspx upload vulnerability
No description provided by source...
Topsec DDOS ads_log_export.php Command Execution
No description provided by source...
DVR surveillance empty token
No description provided by source...