56796 matches found
Farmers-government system /ckq/hnzcout. aspx file CountryName parameter SQL injection vulnerability
No description provided by source...
帝国CMS手机插件/ikaimi/rolling/list.php sql injection vulnerability
No description provided by source...
i-SDN Manager /data/config/userdb information leak vulnerability
No description provided by source...
Farmers-government system /ContractApply/TransferApplyMain. aspx parameters ApplyID SQL injection vulnerability
No description provided by source...
国泰新电软件通用型门户网站群系统多处SQL注入漏洞
No description provided by source...
Internet Explorer 11 安全机制绕过漏洞
No description provided by source...
IBOS协同办公系统misc.php SQL注入
No description provided by source...
Farmers-government system /ContractApply/FamilyApplyMain. aspx parameter ID SQL injection vulnerability
No description provided by source...
PLC路由器任意文件遍历下载
No description provided by source...
Haidao网店系统 /www/appliaction/Controller/User/OrderController.class.php等4处SQL注入
No description provided by source...
蝉知CMS system/module/message/control.php SQL注入
No description provided by source...
seacms /htdocs/seacms/member.php id参数 SQL注入
No description provided by source...
metinfo v5.3 /news/news.php 参数serch_sql SQL盲注漏洞
No description provided by source...
MetInfo 5.3.4 /member/login.php SQL注入
No description provided by source...
WordPress Like Dislike Counter 1.2.3 插件 SQL注入漏洞
No description provided by source...
Swagger 通过参数注入远程代码执行漏洞
详情来源： R7-2016-06 This disclosure will address a class of vulnerabilities in a Swagger Code Generator in which injectable parameters in a Swagger JSON or YAML file facilitate remote code execution. This vulnerability applies to NodeJS, PHP, Ruby, and Java and probably other languages as well. Othe...
Haidao网店系统 /appliaction/Controller/User/CouponsController.class.php等2处SQL注入
No description provided by source...
ZTE Management system网关设备通用型2处任意文件下载漏洞
No description provided by source...
悟空CRM App\Lib\Action\BusinessAction.class.php SQL注入
No description provided by source...
Schneider Electric PowerLogic PM8ECC 模块未授权访问漏洞
PowerLogic PM8ECC是800 PowerMeter系列设备的通讯模块。根据施耐德电气描述, PowerLogic PM8ECC部署于商业设施部门并已在全世界广泛使用。 漏洞描述： 1.访问/status.htm页面。在没登录的情况下发现“User”处有一字符串； 2.以该字符串作为用户名和密码即可登录该设备的Web管理界面和FTP（如有），虽然用户列表中无该用户。...
Blue Ling EIS wisdom collaboration platform /MobileApp/login. aspx injection vulnerability
No description provided by source...
Blue Ling micro applications CMS /basic/usermanager/sysOrgUser/login fdName parameter SQL injection vulnerability
No description provided by source...
PcManFtp DELE command buffer overflow vulnerability
No description provided by source...
Blue Ling EIS wisdom collaboration platform /sm/menu_left_edit. aspx injection vulnerability
No description provided by source...
Blue Ling EIS wisdom collaboration platform /vote/service. aspx injection vulnerability
No description provided by source...
phpoa upLoadOfficeFile.php 任意文件上传漏洞
No description provided by source...
Schoolhos CMS 2.29 Parameter kelas SQL injection vulnerability
No description provided by source...
PHPOA V4. 0 /phpoa/upload/index.php arbitrary file upload vulnerability
No description provided by source...
PcManFtp the LS command buffer overflow
No description provided by source...
WordPress Mobile Detector <=3.5 resize.php the src parameter local file include vulnerability
No description provided by source...
Zhejiang uniview technologies security(DVR/NVR)and other monitoring equipment command execution
In file /Interface/DevManage/VM.php in: code area .............. Code omitted.................... // Set the DNS to resolve the server address case 'setDNSServer' : shellexec'echo "nameserver '. 'DNSServerAdrr'.'"'.' /etc/resolv. conf'; 'Code' = 0; getTip; echo jsonencode; break; default :...
Lws-Construction Management actualites.php parameters id_actualite SQL injection vulnerability
No description provided by source...
网视领航电视台在线播放系统 /t/t1/user/bkzjsplb.aspx 参数 bkzjid SQL注入漏洞
No description provided by source...
ETMV9 digital campus platform any download
No description provided by source...
seacms /htdocs/seacms/reg.php ip参数 SQL注入
No description provided by source...
Web interface for DNSmasq / Mikrotik - SQL Injection
No description provided by source...
Samsung SCX-4x24 Series not authorized to access
No description provided by source...
S8000 rotating machinery online condition monitoring and analysis system /default. asp parameter username injection vulnerability
No description provided by source...
DVR surveillance empty token
No description provided by source...
SG8000 large rotating machine monitoring system Alarm SMS module /sg8k_sms information disclosure
No description provided by source...
Dimensions OA system notes.php parameter nid SQL injection vulnerability
No description provided by source...
Days Bo online training system /Web_Org/Class_Info. aspx file couseid parameter SQL injection vulnerability
No description provided by source...
SGC8000 /sysinfo/index. php? disp=dynamic large rotating machine monitoring system to the server system information disclosure
No description provided by source...
Apache Struts2 security vulnerability S2-041）
No description provided by source...
S8000 rotating machinery online condition monitoring and analysis system weak password
No description provided by source...
Iridium Xun firewall default password
No description provided by source...
phpaaCms message.php SQL Injection Vulnerability
No description provided by source...
Fancier software /tickets/int_order. aspx id parameter sql injection
No description provided by source...