Sechzredo

A vulnerability exists in Das Parking Management System that may lead to information disclosure. The issue impacts an unknown function within the `/Operator/Search` file and can be exploited remotely. The exploit is publicly available.

A flaw has been found in Das Parking Management System 停车场管理系统 that causes information disclosure. The issue affects an unknown function of the file `/Operator/FindAll`. This manipulation can be initiated remotely. The exploit has been published.

A critical issue was found in the API component, specifically affecting an unknown part of the /IntraFieldVehicle/Search file. The manipulation of the `Value` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed and may be used.

A critical issue was found in the API component of the system, specifically affecting the /Reservations/Search file. The manipulation of the `Value` argument leads to SQL injection. This issue can be exploited remotely.

A critical issue affects the /vehicle/search API endpoint of the component, where manipulation of the `vehicleTypeCode` argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical issue was found in the Brilliance Golden Link Secondary System. The problem affects the file /storagework/rentChangeCheckInfoPage.htm and is related to the manipulation of the `clientname` argument, which leads to SQL injection. This issue can be exploited remotely.

A critical issue has been found in the Brilliance Golden Link Secondary System. This issue affects some unknown processing of the file /reprotframework/tcCustDeferPosiQuery.htm. The manipulation of the argument `custTradeId` leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical vulnerability was found in the Brilliance Golden Link Secondary System. The issue affects an unknown function of the file /sysframework/logSelect.htm. The manipulation of the `nodename` argument leads to SQL injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

A critical issue has been identified, affecting an unknown functionality of the file /saas/commonApi/park/getParks of the component API. This leads to improper authentication. The issue can be exploited remotely.

A vulnerability was found in the component Friendly Links Handler of dayrui XunRuiCMS. The manipulation of the `Website Address` argument leads to cross-site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.