56796 matches found
WSTMall apps\home\model\goodsAppraisesModel.class.php id parameter SQL injection
No description provided by source...
Days Bo online training system network school Edition Course_Class_List_Default. aspx the parameter cid SQL injection vulnerability
No description provided by source...
Multiple Airlive IP Cameras backup file information disclosure vulnerability
No description provided by source...
SAUDI SOFTECH gallery.php parameters gid a SQL injection vulnerability
No description provided by source...
Airlive WL-2600CAM IP Camera information disclosure vulnerability
No description provided by source...
HDWiki 5.1 /control/user. php, etc. 2 SQL injection vulnerability
HDWiki description Interactive wiki open source systems HDWiki as China's first with independent intellectual property rights of the Chinese Wiki（Wiki）system, the interactive online（Beijing）Technology Co., Ltd. in 2006 to 11 November 28 the official launch, and strive for domestic and foreign man...
HDWiki 5.1 /control/doc.php SQL injection vulnerability
HDWiki description Interactive wiki open source systems HDWiki as China's first with independent intellectual property rights of the Chinese Wiki（Wiki）system, the interactive online（Beijing）Technology Co., Ltd. in 2006 to 11 November 28 the official launch, and strive for domestic and foreign man...
WSTMall apps\home\action\ArticlesModel.class.php articleId参数 SQL注入
No description provided by source...
天柏在线培训系统 /Web_Org/Ddcb_View.aspx 文件 infoid 参数SQL注入漏洞
No description provided by source...
Hikvision video encoding Device Access Gateway /transformServer/serverConfigInfo.php injection vulnerability
No description provided by source...
Joomla component com_availcal parameter id SQL injection vulnerability
No description provided by source...
WEBONE CMS service.php etc. 5 SQL injection vulnerability
0x01 vulnerability profile WEBONE CMS in the following 5 branch there is SQL injection vulnerability: 1page service. php GET parameter pk can be a Union injection 2page info. php GET parameter pk can be a Union injection 3Page newscon. php GET parameter pk can be a Union injection 4page photobook...
JINGLUN OA system /Systems/user_priv/manage. aspx parameter id SQL injection vulnerability
No description provided by source...
WordPress WP Mobile Detector Plugin 3.5 file upload vulnerability
No description provided by source...
农友政务系统 /ExtWebModels/LandManage/WoodsManage.aspx POST参数WoodID SQL注入漏洞
No description provided by source...
Million hin College management system playtv. aspx parameter id SQL injection vulnerability
No description provided by source...
MikroTik RouterOS cross-site request forgery vulnerability
No description provided by source...
Mastery OA system /general/document/index. php/recv/register/turn parameter rid of the SQL injection vulnerability
http://xxx/general/document/index.php/recv/register/turn post:SERVER=&rid=expselectfromselect concat0x7e7e7e,@@version,0x7e7e7e from user limit 0,1x...
IBM Integrated Solutions Console arbitrary file read vulnerability
No description provided by source...
WeiPHP \weiphp\log.php param parameters 2 SQL injection
No description provided by source...
Easy to create think CMS ViewSecrecyGuestBookMessage. aspx parameters sn SQL injection vulnerability
No description provided by source...
Wolf Bang content management system CheckUserName parameter username SQL injection vulnerability
No description provided by source...
Fujian four create disaster early warning system FileType. aspx parameter ID SQL injection vulnerability
No description provided by source...
ShopBuilder module\adv\admin\adv. php, etc. 5 SQL injection
ShopBuilder description ShopBuilder is designed for large and medium-sized enterprises to develop the professional-level e-Commerce Mall system, powerful, safe and convenient, can carry tens of millions of views, make the enterprise low-cost to quickly build an online Mall, turn on the e-Commerce...
Farmers agriculture regulatory system /ckq/plview. aspx parameter CountryName SQL injection vulnerability
http://xxx/general/document/index.php/recv/register/turn post:SERVER=&rid=expselectfromselect concat0x7e7e7e,@@version,0x7e7e7e from user limit 0,1x...
SAP NetWeaver AS JAVA SQL注入漏洞
No description provided by source...
WSTMall Apps\home\model\ordersmodel.class.php sdate参数等2处SQL注入
No description provided by source...
Meteocontrol WEBlog 多个越权漏洞
No description provided by source...
zentaoPHP框架 SQL注入漏洞
No description provided by source...
WUZHICMS coreframe\app\order\order_goods.php cartids参数 SQL注入
No description provided by source...
FineCMS 企业版后台模板管理任意文件上传漏洞
No description provided by source...
And drainage SCADA industrial control systems /DataSrvs/UCCGSrv. asmx/GetWaterMeterType Parameter model SQL injection vulnerability
No description provided by source...
WordPress Mobile Detector file_get_contents 函数远程文件读取
No description provided by source...
Apache Continuum 1.4.2任意命令执行
No description provided by source...
Resource Data Management Intuitive 650 TDB控制器权限提升漏洞
No description provided by source...
中兴W-LAN无线接入控制器 /apgroup/getChannelByCountryCode.php 参数CountryCode注入漏洞
No description provided by source...
唐桥视频会议系统 /common/web_meeting/ajax.php文件gpId参数SQL注入漏洞
No description provided by source...
PivotX 2.3.11 代码执行漏洞
Pivotx是一套开源的博客内容管理系统（Blog CMS）。该系统支持内置评论审查、垃圾信息防护和模板更换等功能。 PivotX 2.3.11中存在代码执行漏洞。由于重命名文件时未能检查扩展名。攻击者能够执行任意代码。 漏洞出现在上传功能,当上传文件时,为了防止恶意文件的上传,如PHP文件asp文件等等可以执行代码的文件造成代码执行漏洞，因此会检查文件扩展名的文件。然而,PivotX 2.3.11重命名函数却没有进行检查新文件名的扩展,导致代码执行。...
HeerOA faWenAction.do 参数readFile.fileId 本地文件包含漏洞
No description provided by source...
Cisco Prime Network Analysis Module和Cisco Prime Virtual Network Analysis Module本地命令注入漏洞
No description provided by source...
MallBuilder \admin\district.php id参数 SQL注入
No description provided by source...
MallBuilder v5.8 smarty_config.php 参数key SQL注入漏洞
No description provided by source...
海康威视视频接入网关系统 /userInfo/roleInfo.php等34处 SQL注入漏洞
0x01漏洞简介 海康威视视频接入网关系统采用PHP+SQLite架构，其在以下34处均存在注入漏洞： /userInfo/roleInfo.php /userInfo/userInfo.php /data/fetchRoleTreeJson.php /deviceConfig/configDeviceInfo.php /transformServer/serverConfigInfo.php /cameraConfig/transferInfo.php /data/deviceAndCameraListData.php /data/deviceTypeData.php...
WordPress OPS Old Post Spinner 插件任意文件包含漏洞
No description provided by source...
Cisco Unified IP Phone 8945 Series 拒绝服务漏洞
No description provided by source...
Hikvision(海康威视) /data/fetchPlanStatus.php 参数rows 时间盲注
No description provided by source...
Cisco Unified IP Phones本地权限提升漏洞
No description provided by source...
IBOS协同办公系统 \system\modules\report\controllers\DefaultController.php repids参数 SQL注入
No description provided by source...
海康威视视频接入网关系统 downFile.php 参数fileName 任意文件下载漏洞
0x01漏洞简介 海康威视视频接入网关系统在页面/serverLog/downFile.php的参数fileName存在任意文件下载漏洞。 0x02漏洞分析 文件/serverLog/downFile.php alert"文件不存在!";window.history.back-1;'; exit; else $file = fopen$filedir . $filename,"r"; // 打开文件 // 输入文件标签 Header"Content-type: application/octet-stream"; Header"Accept-Ranges: bytes";...