Uncontrolled Resource Consumption

JPA Server in HAPI FHIR allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are many...

OURPHP suffers from SQL injection vulnerability (CNVD-2021-34777)

OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Water Information Management Platform of Shandong Weimicro Technology Co. Ltd (CNVD-2021-35806)

Shandong Weimicro Technology Co., Ltd. is a private scientific research institution mainly engaged in technology development. Ltd. water information management platform, there is a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information in the database...

SQL Injection Vulnerability in Website Building System of Yuanxin Technology (Stock) Company (CNVD-2021-35855)

Ltd. was founded in January, 2002 and is a total web planning, web design, web design, programming, web production, internet marketing, web hosting and related web design value-added services company. It is a company that provides total website planning, website design, web design, programming, w...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35843)

XIONGHAI CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35837)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35850)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Hefei Chenguang Technology Website Building System

Hefei Chenguang Technology is a company engaged in website construction and website production. Hefei Chenguang Technology website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34220)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34221)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34210)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34303)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34299)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34302)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2021-26830

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...

Sql injection

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...

CVE-2021-26830

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...

CVE-2021-26830

The CVE-2021-26830 issue affects Tribalsystems Zenario CMS 8.8.52729, where a SQL Injection vulnerability exists in the Pugin library - delete path, via the ID input in ajax.php. The root cause is lack of input sanitization on the ID parameter, allowing remote attackers to access the database or ...

CVE-2021-26830: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...

PT-2021-17154

Name of the Vulnerable Software and Affected Versions: Tribalsystems Zenario CMS versions prior to 8.8.52729 Description: The issue allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of "ajax.php" in the Pugin library - delete module...