SQL Injection Vulnerability in YunGouCMS v7.1

YunGouCMS is a website builder provided by Taurus Networks for the cloud purchasing model. YunGouCMS v7.1 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2019-3906

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents...

CVE-2019-3906: Use of Hard-coded Credentials

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents...

SQL Injection Vulnerability in Website Building System of Zhongshan Shangyou Network Technology Co.

Zhongshan Shangyou Network Technology Co., Ltd. is a company dedicated to Internet branding and Internet marketing. There is a SQL injection vulnerability in the website building system of Zhongshan Shangyou Network Technology Co., Ltd, which can be exploited by attackers to obtain sensitive...

SQL injection vulnerability in the ad***.php page of YXcmsApp 1.4.7 (CNVD-2019-05336)

YXcmsApp is a PHP and MySQL based enterprise building content management system CMS. A SQL injection vulnerability exists in the ad.php page of YXcmsApp 1.4.7, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2019-5720

includes/db/class.reflinesdb.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field that can allow the attacker to grab the entire database of the application via the voidtransaction.php filterType parameter...

CVE-2019-5720

CVE-2019-5720 affects FrontAccounting 2.4.6. The vulnerability is a SQL Injection in includes/db/class.reflines_db.inc, exploitable via the reference field using the void_transaction.php?filterType parameter, potentially allowing an attacker to extract the entire database. Connected sources (RH, ...

CVE-2019-5720

includes/db/class.reflinesdb.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field that can allow the attacker to grab the entire database of the application via the voidtransaction.php filterType parameter...

SQL Injection Vulnerability in Vansco's Website Builder System

Ltd. is an Internet service company integrating website construction, software development, website planning, graphic design, software development, website operation, space domain name service and other Internet basic services. There is a SQL injection vulnerability in Visco's website building...

Xi'an Bailian website builder system has SQL injection vulnerability

Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an BaiLian website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain...

Changsha Saillian Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Changsha Sailian Network Technology Co. There is a SQL injection vulnerability in the website building system of Changsha Sailian Network Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2018-1000890

FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can allow the attacker to grab the entire database of the application...

CVE-2018-1000630

Battelle V2I Hub 2.5.1 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to /api/PluginStatusActions.php and /status/pluginStatus.php using the jtSorting or id parameter, which could allow the attacker to view, add, modify or delete...

CVE-2018-1000630: Improper Neutralization of Special Elements used in an SQL Command

Battelle V2I Hub 2.5.1 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to /api/PluginStatusActions.php and /status/pluginStatus.php using the jtSorting or id parameter, which could allow the attacker to view, add, modify or delete...

CVE-2018-1000631: Improper Neutralization of Special Elements used in an SQL Command

Battelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tmx/TmxCtl/src/lib/PluginStatus.cpp and TmxControl::userinfo function, which could allow the attacker to view, add, modify or delete information in the back-end database...

PT-2018-9605

Name of the Vulnerable Software and Affected Versions: FrontAccounting version 2.4.5 Description: The issue concerns a Time Based Blind SQL Injection that affects the filterType parameter in the "/attachments.php" API endpoint. This can potentially allow an attacker to access the entire database ...

SQL Injection Vulnerability in PHPSHE B2C Mall System v1.7ca***.php

PHPSHE B2C mall system is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. PHPSHE B2C Mall System v1.7ca.php has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Purchase Frontend pr***.aspx Page of Purchase System

Purchase system Purchase is a purchasing management system features include: product requisitioning, warehousing, inventory counts, data reports and more. A SQL injection vulnerability exists in the front-end pr.aspx page of Purchase, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in File System Profile Frontend ge***.aspx Page

The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the front-end ge.aspx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in zzzphp sa***.php File

zzphp is a free website building system developed using PHP. A SQL injection vulnerability exists in the zzzphp sa.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...