4525 matches found
SQL injection vulnerability in pr***.php page of website building system of Guangzhou Chuangke Network Technology Co.
Guangzhou Chuangke Network Technology Co., Ltd. is a business service company that provides customers with marketing website construction, network marketing promotion, website hosting operation, website production, website design, website promotion and maintenance, website SEO optimization, WeCha...
SQL injection vulnerability in ne***.php page of website building system of Guangzhou Chuangke Network Technology Co.
Guangzhou Chuangke Network Technology Co., Ltd. is a business service company that provides customers with marketing website construction, network marketing promotion, website hosting operation, website production, website design, website promotion and maintenance, website SEO optimization, WeCha...
RockOA SQL注入漏洞
RockOA Xinhuo is an open source office OA system. Rockoa v1.8.7 version of the existence of SQL injection vulnerability , the vulnerability wordModel.php parameters in the user input is not effectively filtered , a remote attacker through the injection of SQL statements to execute the acquisition...
SQL injection vulnerability in website builder system ne***.aspx page of Hangzhou Orange Promise Technology Co.
Hangzhou Orange Promise Technology Co., Ltd. is a company specializing in Internet branding and Internet marketing. Hangzhou Orange Promise Technology Co., Ltd. station building system ne.aspx page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL injection vulnerability in pr***.asp page of website building system of Ruian UB Technology Co.
Ltd. is a social public to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM desig...
SQL injection vulnerability in SeaCMS backend (CNVD-2021-14497)
SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A SQL injection vulnerability exists in the backend of SeaCMS. An attacker can exploit this vulnerability to obtain sensitive information from the database...
SQL Injection Vulnerability in wise on-demand Server
wise on-demand server software is server-side distribution software that provides streaming playback of audio and video files. A SQL injection vulnerability exists in the sewise on-demand server, which can be exploited by an attacker to obtain sensitive information from the database...
SQL Injection Vulnerabilities in the Website Building System of Shenyang Uno Network Technology Co.
Shenyang Uno Network Technology Co., Ltd. mainly provides website production and host maintenance, domain name registration services and network marketing and promotion programs. Shenyang Uno Network Technology Co., Ltd. website building system there is a SQL injection vulnerability, attackers ca...
Bosch FSM-2500 server 和 Bosch FSM-5000 server 信任管理问题漏洞
Bosch FSM-2500 and Bosch FSM-5000 are both panel-ready fire control systems from Bosch of Germany. Bosch FSM-2500 and Bosch FSM-5000 suffer from a hard-coded vulnerability that could be exploited by remote attackers to submit special requests to gain unauthorized access to the database system wit...
SQL Injection Vulnerability in UFIDA U8-OA (CNVD-2021-12781)
Founded in 1988, UFIDA is a leading global provider of cloud services and software for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA. An attacker can exploit the vulnerability to gain access to sensitive database information...
SQL Injection Vulnerability in ZDNT's Customer Resource Management System (CNVD-2021-10558)
ZDNT Customer Resource Management System is a foreign trade management and foreign trade customer management and other functions of the software. There is a SQL injection vulnerability in ZJUENT Customer Resource Management System, which can be exploited by attackers to obtain sensitive informati...
SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co. Ltd (CNVD-2021-10553)
Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...
SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co. Ltd (CNVD-2021-10555)
Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...
Vulnerabilities fixed in Cisco Unified Communications
Cisco has fixed multiple vulnerabilities in several Unified Communications products. An authenticated malicious person remote can exploit the vulnerabilities to gain access data on the underlying file system or in the underlying database. This includes hashed passwords stored in this database...
CVE-2021-22850
HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions...
CVE-2021-22850
HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions...
CVE-2021-22850: Incorrect Permission Assignment for Critical Resource
HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions...
HGiga EIP Access Control Error Vulnerability
Hgiga HGiga EIP is a product of China Hengji Hgiga Corporation. An Access Control Error vulnerability exists in the HGiga EIP product, which stems from a lack of invalid access control on certain pages and can be exploited by an attacker to access a database or perform privileged functions...
PT-2021-15223 · Hgiga Eip · Hgiga Eip
Name of the Vulnerable Software and Affected Versions: HGiga EIP product affected versions not specified Description: The issue is related to ineffective access control in certain pages of the HGiga EIP product, allowing attackers to access the database or perform privileged functions...
SQL Injection Vulnerability in T_Pr***.aspx Page of KTO's Fully Intelligent Parking Video Charging System
Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in the TPr.aspx page of KETOP's fully intelligent parking video charging system. Attackers c...