S-CMS enterprise website builder system backend db***.php file has SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the db.php file in the background of S-CMS enterprise website building system. Attackers c...

Scientific Linux Security Update : gvfs on SL7.x x86_64 (20190806)

Security Fixes : - gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password CVE-2019-3827 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid128221...

S-CMS enterprise website builder system backend P_br*** parameter exists SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Pbr parameter in the background of S-CMS enterprise website building system. Attackers...

SemCMS foreign trade website backend has SQL injection vulnerability

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. semcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

SQL injection vulnerability in ASK2 Q&A system backend (CNVD-2019-30154)

ASK2 Q&A is an open source PHP question and answer program. There is a SQL injection vulnerability in the backend of ASK2 Q&A System, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in ask2 Q&A system backend (CNVD-2019-30155)

ASK2 Q&A is an open source PHP Q&A program. There is a SQL injection vulnerability in the backend of ask2 Q&A System, which can be exploited by attackers to obtain sensitive information about the database...

S-CMS enterprise website builder system backend aj***.p*** C*** parameter has SQL injection vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS enterprise station building system background aj.p C parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL injection vulnerability in zzcms backend (CNVD-2019-30313)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the backend of zzcms, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in zzcms backend (CNVD-2019-30314)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the backend of zzcms, which can be exploited by attackers to obtain sensitive information from the database...

IBM Emptoris Contract Management SQL Injection Leak (CNVD-2019-31130)

IBM Emptoris Contract Management is a suite of software from IBM USA that automates the contract lifecycle. The software automates and manages all phases of the contract lifecycle, from the creation, execution and renegotiation of contracts and amendments, to performance monitoring, analysis and...

IBM Emptoris Spend Analysis SQL Injection Vulnerability

IBM Emptoris Spend Analysis is a product within IBM's suite of procurement solutions for consolidating, cleansing and categorizing spend data from decentralized systems. A SQL injection vulnerability exists in IBM Emptoris Spend Analysis versions 10.1.0 through 10.1.3, which can be exploited by a...

Ubuntu: Security Advisory (USN-4105-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sql injection

IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IB...

USN-4105-1 cups vulnerabilities

Stephan Zeisberg discovered that the CUPS SNMP backend incorrectly handled encoded ASN.1 inputs. A remote attacker could possibly use this issue to cause CUPS to crash by providing specially crafted network traffic. CVE-2019-8696, CVE-2019-8675 It was discovered that CUPS did not properly handle...

Zhuhai Innovation China website building system backstage login there are logic flaws vulnerability

Zhuhai Innovation Network Technology Co., Ltd. is committed to the application of the Internet, e-commerce platform operation, website construction and maintenance, micro letter public number and small program development. Zhuhai innovation China station building system background login there is ...

Code execution vulnerability in yershop

yershop open source online store system is a thinkphp5-based mall system with a key to generate controllers , models , validators , templates , general additions and deletions , and other functions. yershop code execution vulnerability exists in the background , an attacker can exploit the...

SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2019:2018-1)

This update for polkit fixes the following issues : Security issue fixed : CVE-2019-6133: Fixed improper caching of auth decisions, which could bypass uid checking in the interactive backend bsc1121826. Note that Tenable Network Security has extracted the preceding description block directly from...

Priceline: Account takeover via Google OneTap

Summary: It's possible to take over any priceline.com user's account knowing their email. The only requirement is that the victim's email domain is not registered with Google's Gsuite. The root cause of this issue is that the backend does not verify whether the email provided is a confirmed one...

QEMU: net: ignore packets with large size

A potential integer overflow issue was found in the networking back-end of QEMU. It could occur while receiving packets, because it accepted packets with large size value. Such overflow could lead to OOB buffer access issue. A user inside guest could use this flaw to crash the QEMU process...

Information leakage vulnerability in HongCMS backend

HongCMS Chinese and English website system is a lightweight website system , extremely fast access speed , easy to use . Program code is simple and rigorous , completely free and open source. HongCMS background information leakage vulnerabilities , attackers can use the vulnerability to obtain da...