Directory traversal

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

CVE-2018-16344

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

CVE-2018-16344

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

Zomato: [www.zomato.com] SQLi - /php/██████████ - item_id

Thanks @gerbenjavado for helping us keep @zomato secure : Thanks to the entire @Zomato team for doing this challenge. Its a pleasure to be back in the bug bounty game after a while. Introduction So I managed to find SQLi on https://www.zomato.com/php/██████████ in the POST parameter itemid...

IBM Maximo Asset Management SQL Injection Vulnerability (CNVD-2018-17089)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. An SQL injectio...

Niubicms v1.8 SQL Injection Vulnerability in Frontend

Niubicms is by the Nanjing Niukun Network Technology Co., Ltd. independent research and development of the novel website source code, news website source code, for PHP open source system. Niubicms v1.8 SQL injection vulnerability exists in the foreground . Attackers can use the vulnerability to...

Sql injection

The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read...

SQL Injection Vulnerability in Topsystem's Website Building System

Wenzhou top information technology limited company, focusing on providing enterprises with website marketing planning, construction, promotion and maintenance of one-stop service. Topland technology station building system SQL injection vulnerability, attackers can use the vulnerability to obtain...

ShopsN open source online store full web system suffers from SQL injection vulnerability (CNVD-2018-17331)

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN v2.3.3 official version of the existen...

SQL Injection Vulnerability in Azeus CMS 2.0 Backend

Central CMS 2.0 is a cms system made by Central Studio, this CMS is written in UTF-8 coding. Azeus CMS 2.0 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Ningbo Youdao Network Technology Co.

Ningbo Youdao Network Technology Co., Ltd. is an Internet company specializing in corporate brand Internet digital communication and Internet integrated marketing. Ningbo Youdao Network Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited b...

SQL Injection Vulnerability in Zhejiang Instant E-commerce Co.

Ltd. is a website construction based on the integration of network marketing, bidding ranking, marketing hosting and other integrated e-commerce network marketing company. Ltd. building system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in nucms V1.1

nucms is a content management system based on PHP+MYSQL technology developed by Liaocheng Leadsun Network Technology Co. nucms V1.1 version of SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

ShopsN open source online store system adHandle function there are SQL injection vulnerabilities

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN 2.3.3 official version of the adHandle...

PbootCMS V1.1.7 SQL Injection Vulnerability in Sl***.php Page

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 SQL injection vulnerability exists in Sl.php page. An attacker can exploit the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in PbootCMS V1.1.7 Do***.php page (CNVD-2018-17754)

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Do.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...

PbootCMS V1.1.7 SQL Injection Vulnerability in Li***.php Page

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Li.php page SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Shanghai Wuwu Laike Technology Co.

Shanghai Wuwu Laike Technology Co., Ltd. is an enterprise dedicated to Internet and mobile Internet services. There is a SQL injection vulnerability in the website builder system of Shanghai Wuwu Laike Technology Co. An attacker can exploit the vulnerability to obtain sensitive information from t...

SQL injection vulnerability in Ne***.asp page of website builder system of Guangzhou Hande Network Technology Co.

Ltd. is a network company specializing in Internet technology services, network technology development and application in one. A SQL injection vulnerability exists in the Ne.asp page of the website building system of Guangzhou HAND Network Technology Co. An attacker can use the vulnerability to...

SQL injection vulnerability in ac***.php page of PinYou Movie & TV website builder system

PinYou film and television station building system is a set of add video, with membership system, recharge system, is a set of film and television station can be charged to watch the source code. SQL injection vulnerability exists in the ac.php page of the PinYou Movie & TV website builder system...