SQL Injection Vulnerability in OA Office System of Chengdu Huigao Software Co.

Chengdu Huigao Software Co., Ltd. is an OA software developer and service provider. A SQL injection vulnerability exists in the OA office system of Chengdu Huigao Software Co. The vulnerability can be exploited by an attacker to obtain sensitive information from the database...

CVE-2020-4328: Improper Neutralization of Special Elements used in an SQL Command

IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 177839...

SQL Injection Vulnerability in CMS Backend of Luoyang Yunye Information Technology Co.

Yunye CMS enterprise building system is a php open source cms specialized in small and medium-sized enterprise website construction. Luoyang Yunye Information Technology Co., Ltd. Yunye CMS background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive informatio...

SQL injection vulnerability in p***.php page of website building system of Inner Mongolia Wando Information Technology Co.

Wando Technology is an information technology company dedicated to enterprise informatization application services, in order to actively promote the development of enterprise informatization and e-commerce, because of the transparency, so the integrity of the enterprise policy. It is an applicati...

SQL injection vulnerability in p***.php page of website building system of Inner Mongolia Wando Information Technology Co.

Wando Technology is an information technology company dedicated to enterprise informatization application services, in order to actively promote the development of enterprise informatization and e-commerce, because of the transparency, so the integrity of the enterprise policy. It is an applicati...

SQL injection vulnerability in a***.php page of website building system of Inner Mongolia Wando Information Technology Co.

Wando Technology is an information technology company dedicated to enterprise informatization application services, in order to actively promote the development of enterprise informatization and e-commerce, because of the transparency, so the integrity of the enterprise policy. It is an applicati...

PT-2020-14601

Name of the Vulnerable Software and Affected Versions rConfig version 3.9.5 Description The issue allows a remote authenticated attacker to send crafted SQL statements to the "devices.crud.php" script using the custom Location parameter. This could enable the attacker to view, add, modify, or...

typo3 -- multiple vulnerabilities

Typo3 Team reports: In case an attacker manages to generate a valid cryptographic message authentication code HMAC-SHA1 - either by using a different existing vulnerability or in case the internal encryptionKey was exposed - it is possible to retrieve arbitrary files of a TYPO3 installation. This...

Gansu Xiusen Network Information Technology Co., Ltd. website building system has SQL injection vulnerabilities

Gansu Xiusen Network Information Technology Co., Ltd abbreviation: Xiusen Network, located in Anning District, Lanzhou, Gansu, the company is engaged in software development, website development and other high-tech. Gansu Xiusen Network Information Technology Co., Ltd. website building system has...

SQL Injection Vulnerability in Extreme CMS of Langfang Extreme Network Technology Co. Ltd (CNVD-2020-48972)

Extreme CMS is an open source and free PHPCMS web content management system. Ltd. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in the Website Building System of Zhucheng City Three Swords Network Media Limited (CNVD-2020-49382)

Zhucheng City Three Swords Network Media Co., Ltd. was established in 2005, is a local enterprise in Zhucheng City and neighboring cities e-commerce application service team. Zhucheng City Three Swords Network Media Co., Ltd. station building system there are SQL injection vulnerabilities,...

Guangzhou Huaji Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Ltd. is a professional commitment to enterprise information technology all aspects of the application of services of the Internet enterprises, is the domestic one-stop network marketing innovative e-commerce service organizations. Guangzhou Huaji Network Technology Co., Ltd. building system there...

SQL Injection Vulnerability in 5vshop E-commerce System of Shijiazhuang Zhenhong Network Technology Co.

5vshop belongs to Shijiazhuang Zhenghong Network Technology Co., Ltd, since 2004 has been committed to the enterprise Internet application of related services, engaged in enterprise, personal e-commerce website construction; e-commerce project planning, creativity, operation, to provide a...

SQL Injection Vulnerability in Lizheng 2nd Generation Management Information System of Beijing Lizheng Software Co.

Founded in July 1995, Beijing Rizheng Software Co., Ltd. is a national high-tech enterprise and a "double-soft" software enterprise and software product certified enterprise. Ltd. has a SQL injection vulnerability in its 2nd generation management information system, which can be exploited by...

SQL Injection Vulnerability in HongYuJD

HongYuJD is a mall website system of HongYu technology team. HongYuJD suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Zhucheng City Three Swords Network Media Co., Ltd. website system has SQL injection vulnerabilities

Zhucheng City Three Swords Network Media Co., Ltd. for the Internet web application development company, which for many customers to establish an online shopping mall web system. There is a SQL injection vulnerability in the website system of Zhucheng City Three Swords Network Media Co., Ltd, whi...

SQL Injection Vulnerability in VUMC Cloud (CNVD-2020-49559)

Ltd. is a foreign trade SaaS service provider, but also a professional foreign trade industry solutions provider. Ltd. SQL injection vulnerability exists in VUMA Cloud. An attacker can exploit the vulnerability to obtain sensitive information from the database...

CVE-2020-5768

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote, authenticated attacker to determine the value of database fields...

SQL injection vulnerability in pr***.asp page of Changzhou OceanX Network Technology Co.

Changzhou Oceanus Network Technology Co., Ltd. is a company in Changzhou to provide website construction, web design, web production, network promotion, electronic sample production, enterprise post office and other Internet services company, for enterprises to provide, including web hosting,...

SQL Injection Vulnerability in Do***.cl***.php File of Web Exhibition Chinese and English Enterprise Website Management System

Netizen Chinese and English enterprise website management system is developed using PHP + MYSQL technology and MVC mode, code is easy to maintain, support for pseudo-static function, can generate google and baidu maps, support for customizing url, keywords and descriptions, in line with SEO...