NiuShop suffers from SQL injection vulnerability (CNVD-2020-56379)

Niushop is designed by Shanxi Niu Cool Information Technology Co., Ltd. design, research and development of a set of PHP open source shopping center. NiuShop has a SQL injection vulnerability, which can be exploited by attackers to obtain website database data...

Multiple systems of Xi'an Zumibo Intelligent Technology Co., Ltd. suffer from universal password login vulnerability

Ltd. is a company that focuses on providing customized development of industrial intelligent control, and provides detailed and perfect overall solutions for industrial control enterprises. Xi'an Xibo Intelligent Technology Co., Ltd. has a universal password login vulnerability in several systems...

SQL injection vulnerability in ne***.php page of website building system of Jinan Cabbage Network Technology Co.

Jinan Cabbage Network Technology Co., Ltd. is a company engaged in website construction, technology outsourcing, WAP mobile site construction, micro letter and small program custom development, system UI and graphic design, PHP system development, Netease enterprise mailbox. There is a SQL...

SQL Injection Vulnerability in Shijiazhuang Diyi Advertising Co.

Shijiazhuang Diyi Advertising Co., Ltd. is a company dedicated to corporate branding and marketing planning. Shijiazhuang Diyi Advertising Co., Ltd. website building system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

SQL Injection Vulnerability in the Website Building System of Longcheng Internet Wenzhou Network Company (CNVD-2020-54843)

Wenzhou Longcheng Internet Technology Co., Ltd - is engaged in website construction, website production, website design, graphic design, website optimization, website promotion, album design and other integrated Internet companies. Long Cheng Internet Wenzhou Network Company website building syst...

SQL Injection Vulnerability in East Technology Limited's Website Building System

East Technology Limited is a Hong Kong based web design and mobile application company. A SQL injection vulnerability exists in East Technology Limited's website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Taiwan Qualcomm's Website Builder System

Ares Internet is a company that specializes in Sheng Yuan interior design, real estate web design, web design, fast website, template, advertisement design, graphic design, and website building. A SQL injection vulnerability exists in the website builder system of Taiwan Ares Network, which can b...

SQL Injection Vulnerability in phpweb finished website builder system

PHPWEB system is developed with PHP+MYSQL technology, with clear architecture and easy-to-maintain code. Support pseudo-static function, can generate google and baidu map, support keywords and descriptions, in line with SEO standards. phpweb finished website builder system has a SQL injection...

Critical Flaws in WordPress Quiz Plugin Allow Site Takeover

A plugin that is designed to add quizzes and surveys to WordPress websites has patched two critical vulnerabilities. The flaws can be exploited by remote, unauthenticated attackers to launch varying attacks – including fully taking over vulnerable websites. The plugin, Quiz and Survey Master, is...

CVE-2020-15925

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPFXPAR1 parameter...

SQL injection vulnerability in im***.asp page of website building system of Hanzhong Qiyuan Power Network Co.

Hanzhong Qiyuan Power Network Co., Ltd. is a high-tech Internet technology service provider. Hanzhong Qiyuan Power Network Co., Ltd. website building system im.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

SQL Injection Vulnerability in Website Building System of Linyi Xinbao Network Technology Co. Ltd (CNVD-2020-51582)

Linyi Xinpao Network Technology Co., Ltd. is a company that provides website construction, software development and services, e-commerce, website operation, network marketing and promotion; network technology training consulting and information services; corporate image marketing planning,...

SQL Injection Vulnerability in pr***.aspx of the website building system page of Jacko Web Design Studio

Jacko Network Design Studio is an integrated communication agency with multi-faceted professional services such as website construction, graphic design, advertising production and printing. There is a SQL injection vulnerability in pr.aspx, which can be exploited by attackers to obtain sensitive...

SQL injection vulnerability in ne***_vi***.asp page of website building system of Ruian City Business Enterprise Network Technology Co.

Ruian Business Enterprise Network Technology Co., Ltd. is a high-tech enterprise dedicated to the design and production of enterprise and commercial websites, to improve the level of SMEs' network marketing applications, and to enhance the comprehensive competitiveness of enterprises in the...

Carson & SAINT SAINT Security Suite SQL Injection Vulnerability (CNVD-2020-47572)

Carson & SAINT SAINT Security Suite is the U.S. Carson & SAINT a set of vulnerability management, security configuration assessment, penetration testing and other functions of the security suite. A SQL injection vulnerability exists in the Assets component of Carson & SAINT SAINT Security Suite...

CVE-2020-16277

An SQL injection vulnerability in the Analytics component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, authenticated attacker to gain unauthorized access to the database...

SQL Injection Vulnerability in Dongsheng Logistics System of Qingdao Dongsheng Weiye Software Co.

Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004 formerly known as Qingdao Jinghong Logistics Information Technology Co., Ltd., the company's main business scope for shipping logistics-related products and services. A SQL injection vulnerability exists in Qingdao Dongsheng...

CVE-2020-16277: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability in the Analytics component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, authenticated attacker to gain unauthorized access to the database...

PT-2020-14864

Name of the Vulnerable Software and Affected Versions SAINT Security Suite versions 8.0 through 9.8.20 Description The issue is related to an SQL injection vulnerability in the Analytics component. This vulnerability allows a remote, authenticated attacker to gain unauthorized access to the...

PT-2020-14863

Name of the Vulnerable Software and Affected Versions SAINT Security Suite versions 8.0 through 9.8.20 Description The issue allows a remote, authenticated attacker to gain unauthorized access to the database due to an SQL injection vulnerability in the Assets component. Recommendations For...