PT-2019-15421

Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions 10.2 through 10.2.6 MOVEit Transfer versions 11.0 through 11.0.4 MOVEit Transfer versions 11.1 through 11.1.3 Description Multiple SQL Injection vulnerabilities have been found in the REST API that could allow an...

SQL Injection Vulnerability in ZZCMS Frontend

ZZCMS is a content management system for Merchants Network. A SQL injection vulnerability exists in the frontend of ZZCMS. An attacker can exploit this vulnerability to obtain sensitive information from the database...

NiuShop suffers from SQL injection vulnerability (CNVD-2019-43346)

Niushop open source mall using thinkphp5.0 MySQL development language development , completely open source mall system , can be used for enterprises , individuals to establish their own online free mall , support for open source WeChat Mall , open source applet , open source new retail , B2B2C,...

SQL Injection Vulnerability in pr***.asp Page of Yiming Networks Website Builder System

Yiming network is engaged in website construction, webpage production, website promotion, website optimization, webpage design, website maintenance, domain name registration, web hosting, enterprise mailbox, space rental, website promotion, 3721 network real name, Baidu bidding ranking, Google...

AUO SunVeillance Monitoring System 1.1.9e - MailAdd SQL Injection

AUO SunVeillance Monitoring System 1.1.9e - MailAdd SQL Injection Exploit Title: AUO SunVeillance Monitoring System 1.1.9e - 'MailAdd' SQL Injection Date: 2019-10-24 Exploit Author: Luca.Chiou Vendor Homepage: https://www.auo.com/zh-TW Version: AUO SunVeillance Monitoring System all versions prio...

SQL Injection Vulnerability in Chengdu JINWEI TECHNOLOGY CO.

Chengdu, Chengdu, this network technology is a Chengdu, engaged in website planning, web design, website construction and development, website optimization, Internet marketing and other professional services in the field of network technology limited company. A SQL injection vulnerability exists ...

Sangoma Technologies SBC Parameter Injection Vulnerability

The Sangoma Technologies SBC is a border session controller SBC from Sangoma Technologies, a Canadian company. A parameter injection vulnerability exists in Sangoma Technologies SBC version 2.3.23-119-GA, which can be exploited by an attacker to bypass authentication and log in as a non-existing...

Oracle PeopleSoft Enterprise HCM Human Resources CVE-2019-2951 Remote Security Vulnerability

Description Oracle PeopleSoft Enterprise HCM Human Resources is prone to a remote security vulnerability. These vulnerabilities can be exploited over the 'HTTP' protocol. These vulnerabilities affect the following supported versions: 9.2 Technologies Affected Oracle PeopleSoft Enterprise HCM Huma...

SQL injection vulnerability in seacms backend ad***_co***.php page

seacms ocean video management system, ocean cms is a video-on-demand system based on PHP + MySql technology. There is a SQL injection vulnerability in the adco.php page in the background of seacms. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Incentive Technology Website Building System n****o.asp

HANDS network originated from ten years ago, the studio is committed to providing users with high-quality website construction solutions, business covering PC station, mobile station, to provide high-quality customized and special templates station building services. There is a SQL injection...

Cisco Unified Communications Manager WEB Interface SQL Injection Vulnerability

Cisco Unified Communications Manager is a unified communications solution. A SQL injection vulnerability exists in the Cisco Unified Communications Manager WEB interface, which could be exploited by remote attackers to submit a specially crafted SQL request to manipulate a database, obtain...

Chengdu Firefox Technology Co., Ltd. website builder system suffers from SQL injection vulnerabilities

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion and development of new technology areas of the network, mainly dedicated to the enterprise information technology services of professional network companies, with a number of Internet-related products and services. Chengdu Firef...

SQL injection vulnerability in seacms backend (CNVD-2019-40979)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Zigong Tianqi Network System Co.

Zigong Tianqi Network System Co., Ltd. was founded in 1999, the company is committed to network construction. There is a SQL injection vulnerability in the website building system of Zigong Tianqi Network System Co., Ltd, which can be exploited by attackers to obtain sensitive information from th...

SQL Injection Vulnerability in Business-to-Business Website Building System

Qingdao Business to Faith Network Technology Co., Ltd. was founded in March 2001, initially a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services, high-tech specialized companies, is one of the first batch of domestic Internet...

Unauthorised File Read Or Deletion

Voyager is vulnerable to unauthorised file access. Any user with access to admin and compass can read or delete any files, allowing an attacker to steal .env file of the application and to sign his own new session and cookie with secret application key or just dropping the database, knowing...

SQL Injection Vulnerability in Kaixin Filing System

Qixing File System is a functional system that supports personnel statistics, personnel change records and other functions. File SystemProfile contains employee files, company contracts and employee training management. Qixing File System suffers from a SQL injection vulnerability, which can be...

ShopsN open source mall system ed*** function SQL injection vulnerabilities exist

ShopsN free version of B2C e-commerce is a product of Shanghai Yisu Network Technology Co. ShopsN open source mall system ed function SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

Yantai Cloud Pulse Network CMS website building system has SQL injection vulnerability

Yantai Cloud Pulse Network Technology Co., Ltd. is a professional website construction and search engine marketing services provider. Dedicated to small and medium-sized enterprises network marketing services, and website construction, enterprise version of the PC website construction, three-in-o...

SQL injection vulnerability in p****t.asp page of basic website building system of Shenzhen Tiandixin Network Technology Co.

Tiandixin network was founded in 2010, is a strategic research and development-oriented enterprises, many large-scale project experience, more than tens of thousands of Chinese enterprises common choice of website platform builder, the company mainly focuses on corporate website construction, Bai...