<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 06 Oct 2026 21:14:04 +0000</lastBuildDate>
    <item>
      <title>CVE-2023-5828 — Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System login.aspx…</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2023-5828</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System, ontall longxing_industrial_development_zone_project&lt;/p&gt;
&lt;p&gt;A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the argument tbxUserName leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243727.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System, ontall longxing_industrial_development_zone_project&lt;/p&gt;
&lt;p&gt;A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the argument tbxUserName leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243727.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2023-5828</guid>
    </item>
  </channel>
</rss>
