Sourcecodester Medical Store Point SQL注入漏洞

Sourcecodester Medical Store Point is a Sourcecodester open source application. A Pharmacy/Medical Store Point of Sale POS system. Pharmacy Medical Store and Sale Point suffers from a SQL injection vulnerability that originates from a blind time-based SQL injection attack performed on the Medical...

Fangfa FDCMS SQL注入漏洞

FDCMS is a PHP-based content management system of Sichuan Method Digital Technology Co. A SQL injection vulnerability exists in FDCMS version 4.0. An attacker can use this vulnerability to inject malicious SQL via Admin/Lib/Action/FloginAction.class.php to obtain database records...

PT-2021-3914

Name of the Vulnerable Software and Affected Versions Online Shopping Alphaware version 1.0 Description The issue is related to the id parameter in the web application, which is vulnerable to an Error-Based blind SQL injection. This vulnerability allows an attacker to execute arbitrary SQL comman...

Advantech iView² suffers from SQL injection vulnerability

iView² is a network element management system based on SNMP configuration and management of B B SmartWorx chassis and module products It is a WEB application whose main functional programs are located on a WEB server and can be accessed by all users via a WEB browser. An SQL injection vulnerabili...

SQL Injection Vulnerability in SEACMS (CNVD-2021-41711)

SEACMS is a video-on-demand system designed for webmasters with different needs. SEACMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Shandong Juheng Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Shandong Juheng Network Technology Co., Ltd, is a leading domestic digital platform service provider. Shandong Juheng Network Technology Co., Ltd. website building system exists SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

BEESCMS suffers from SQL injection vulnerability (CNVD-2021-40206)

BEESCMS adopts PHP+MYSQL, featuring multi-language system and easy expansion of content modules. BEESCMS has SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in SEMCMS Shop Backend (CNVD-2021-40213)

SEMCMS Shop is a self-developed open source online store btc system. SQL injection vulnerability exists in SEMCMS Shop backend. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Ruiyi Education Cloud Teaching Analysis System

Ruiyi Education Technology Co., Ltd. is a Ruiyi intelligent teaching overall solution, integrating the self-developed Ruiyi cloud teaching system, cloud resource library system, cloud question bank system. There is a SQL injection vulnerability in RuiYi Education Cloud Teaching Analysis System,...

CVE-2021-20720

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors...

CVE-2021-20720

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors...

SQL Injection Vulnerability in Shipping 100 Autoship System

Shipping 100 is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in the Shipment 100 Autoship System. An attacker can exploit the vulnerability to obtain sensitive information from the database...

CVE-2021-31827

In Progress MOVEit Transfer before 2021.0 13.0, a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used MySQL, Microsoft SQL Server...

CVE-2021-31827

In Progress MOVEit Transfer before 2021.0 13.0, a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used MySQL, Microsoft SQL Server...

CVE-2021-31827

In Progress MOVEit Transfer before 2021.0 13.0, a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used MySQL, Microsoft SQL Server...

PT-2021-19530

Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2021.0 13.0 Description A SQL injection issue has been discovered in the MOVEit Transfer web application, potentially allowing an authenticated attacker to gain unauthorized access to the database. The attacke...

SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38027)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Station Helpers CMS suffers from SQL injection vulnerability (CNVD-2021-37351)

Station Helpers CMS is a CMS open source system dedicated to creating a full-featured ... Station Helpers CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Lansing Sky Human Resource Management System

Ltd. is a focus on human resources management software research, development and solutions for high-tech enterprises. Lanxin Tianji human resources management system SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

BlueCMS suffers from SQL injection vulnerability (CNVD-2021-37563)

BlueCMS is a free professional local portal system developed by open source combination PHP + MYSQL. BlueCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...