SQL Injection Vulnerability in Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

SQL Injection Vulnerability in cp***.php of Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

PT-2019-14650

Name of the Vulnerable Software and Affected Versions Progress MOVEit Transfer versions 2018 SP2 before 10.2.4 Progress MOVEit Transfer versions 2019 before 11.0.2 Progress MOVEit Transfer versions 2019.1 before 11.1.1 Description The issue allows an unauthenticated attacker to gain unauthorized...

WordPress sirv plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress sirv plugin versions prior to 1.3.2. The vulnerability stems...

CVE-2019-16264

In Escuela de Gestion Publica Plurinacional EGPP Sistema Integrado de Gestion Academica GESAC v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database...

CVE-2019-16264

In Escuela de Gestion Publica Plurinacional EGPP Sistema Integrado de Gestion Academica GESAC v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database...

Sql injection

In Escuela de Gestion Publica Plurinacional EGPP Sistema Integrado de Gestion Academica GESAC v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database...

PT-2019-14606

Name of the Vulnerable Software and Affected Versions EGPP Sistema Integrado de Gestion Academica GESAC version 1 Description The issue concerns a SQL injection vulnerability in the authentication form of the affected software. Specifically, the username parameter is vulnerable, allowing attacker...

CVE-2019-16264: Improper Neutralization of Special Elements used in an SQL Command

In Escuela de Gestion Publica Plurinacional EGPP Sistema Integrado de Gestion Academica GESAC v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database...

SQL injection vulnerability in pr***.php file of website building system of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is engaged in marketing planning, the company provides website design, graphic design, program development and Internet marketing. There is a SQL injection vulnerability in the pr.php file of the website building system of Suzhou Ernst Network Technology...

Shandong Qiangbi Information Technology Co., Ltd. website building system has SQL injection vulnerabilities

Shandong Qiangbi Information Technology Co., Ltd. is oriented to enterprise information service-oriented Internet application service enterprises. There is a SQL injection vulnerability in the website building system of Shandong Qiangbi Information Technology Co. Attackers can use the vulnerabili...

SQL injection vulnerability in yiqicms frontend pr***.php file

Yiqicms is a SEO-based marketing enterprise website system, using PHP+Mysql open source building system. There is a SQL injection vulnerability in the front pr.php file of yiqicms. Attackers can use this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in ESPCMS Ar***.php Page

ESPCMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the ESPCMS Ar.php page, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Dalian Dawn Times Technology Development Co.

Dalian Dawn Times Technology Development Co., Ltd. is an Internet company dedicated to the field of network infrastructure services. A SQL injection vulnerability exists in the website building system of Dalian Dawn Times Technology Development Co. An attacker can exploit the vulnerability to...

SQL injection vulnerability in ne***.php page of website building system of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is a company engaged in marketing planning, providing website design, graphic design, program development and Internet marketing. Suzhou Ernst Network Technology Co., Ltd. website building system ne.php page SQL injection vulnerability, attackers can use...

CVE-2019-16114

In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to use his crafted database, which allows him to gain access to the application. Next, he can change the directory that the application uploads files to, which allows him to achieve remote code execution...

PT-2019-14518

Name of the Vulnerable Software and Affected Versions ATutor version 2.2.4 Description The issue allows an unauthenticated attacker to modify application settings, forcing the application to use a crafted database. This enables the attacker to gain access to the application. Furthermore, the...

SQL Injection Vulnerability in Huaxia ERP System

Huaxia ERP based on the SpringBoot framework , SaaS model , aspires to provide small and medium-sized enterprises with open source good ERP software , currently focusing on sales and inventory + financial functions . Huaxia ERP system SQL injection vulnerability , attackers can use the...

SQL Injection Vulnerability in ne***.php Page of Pangu Network Technology Co.

Pangu provides enterprises with intelligent integrated marketing services based on Baidu's commercial product system, covering brand marketing, effect marketing, digital marketing, media marketing, content marketing, public relations marketing, and event execution. There is a SQL injection...

SQL Injection Vulnerability in Website Building System of Guangzhou LEAFCO Network Technology Co.

Ltd. is a website design company that provides website application system, mobile APP application system and WeChat public number for enterprise users. A SQL injection vulnerability exists in the website building system of Guangzhou LEAF Network Technology Co. An attacker can exploit the...