SQL injection vulnerability in ac***.php page of PinYou Movie & TV website builder system

PinYou film and television station building system is a set of add video, with membership system, recharge system, is a set of film and television station can be charged to watch the source code. SQL injection vulnerability exists in the ac.php page of the PinYou Movie & TV website builder system...

Starbucks: Backup Source Code Detected

Impact Depending on the nature of the source code disclosed, an attacker can mount one or more of the following types of attacks:•Access the database or other data resources. With the privileges of the account obtained, attempt to read, update or delete arbitrary data from the database. •Access...

SQL Injection Vulnerability in the Website Building System of Taiyuan Guoyuantiancheng Network Technology Co.

Taiyuan Guoyuan Tiansheng Network Technology Co., Ltd. mainly provides enterprises with Baidu, 360 search engine clicks without deduction marketing promotion, APP custom development, Taobao Tmall Jingdong store operation and maintenance, WeChat public platform and small program development, PC,...

SQL Injection Vulnerability in the Website Building System of Shanghai AoS Network Technology Co.

Shanghai Avantage Network Technology Co., Ltd. provides website construction, mobile services, WeChat development, domain name registration, enterprise mailbox, cloud server, SMS marketing, 720 degree panoramic display, VI design and product photography services as the core business of small and...

ZZCMS 8.3 suffers from SQL Injection Vulnerability

zzcms is asp language to do free open-source website building system, mainly facing the majority of webmasters to use. ZZCMS website builder system 8.3 SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

CVE-2017-3183

Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions. Sage XRT Treasury is a business finance management application. Database user access privileges are determine...

Design/Logic Flaw

Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions. Sage XRT Treasury is a business finance management application. Database user access privileges are determine...

CVE-2017-3183

Sage XRT Treasury v3 is affected by CVE-2017-3183 through an authorization bypass where database access privileges are determined by the USER_CODE field. An authenticated, low-privilege user can alter USER_CODE to match a privileged user and gain full/privileged access to the SQL database, enabli...

CVE-2017-3183 Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions

Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions. Sage XRT Treasury is a business finance management application. Database user access privileges are determine...

EML Enterprise Address Book Management System v5.4.4 has SQL Injection Vulnerability

EML enterprise customer relationship management system is based on Linux open kernel and Apache based Php + Mysql intelligent B / S interactive service system. EML Enterprise Contacts Management System v5.4.4 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to...

SQL injection vulnerability in ne***.php page of website building system of Beijing Yitianxing Technology Co.

Ltd. is an Internet service provider specializing in providing customized website construction solutions for enterprises. A SQL injection vulnerability exists in the ne.php page of the website building system of Beijing Yitianxing Technology Co. An attacker can use the vulnerability to obtain...

Cisco Policy Suite Policy Builder Authentication Bypass Vulnerability

Cisco Policy Suite is a carrier-grade policy, charging, and subscriber data management solution. An authentication bypass vulnerability exists in the Policy Builder database of Cisco Policy Suite. The vulnerability stems from a lack of authentication. An attacker can exploit the vulnerability by...

CVE-2018-0374

Cisco Policy Suite prior to version 18.2.0 vulnerable to an unauthenticated remote attack via the Policy Builder database. The root cause is lack of authentication, enabling an attacker to connect directly to the Policy Builder database and access or modify data. Affected component: Policy Builde...

OURPHP website builder system has SQL injection vulnerability

OURPHP is a PHP+MySQL based development of W3C standard building system. OURPHPCMS V1.8.2, V1.8.3 version of the system are SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Easylink's Website Building System

Xi'an Yiheyi Technology Co., Ltd. is a high-tech enterprise integrating website construction, brand design, network promotion, software development, system integration and other businesses. Easy Unity Technology website building system has a SQL injection vulnerability, which can be exploited by...

SQL Injection Vulnerability in SEMCMS_i***.php page of SemCms website builder system version 2.7

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run...

SQL Injection Vulnerability in Hubei Guosheng Technology Co.

Ltd. is a full-network value marketing service provider, to provide customers with comprehensive digital innovation services, to help traditional enterprises to realize the "Internet +" transformation and upgrading. Ltd. website building system there is a SQL injection vulnerability, attackers ca...

SemCMS php version of foreign trade website SEMCMS_In*****.php page has SQL injection vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run...

SemCMS php version of foreign trade website SEMCMS_Ba****.php page has SQL injection vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run...

OCS Inventory NG SQL Injection Vulnerability (CNVD-2018-13357)

OCS Inventory NG Open Computer and Software Inventory Next Generation is a Asset Management software developed by OCS Inventory team. The software helps administrators master computer software installation and configuration, as well as low network traffic communication between HTTP proxies and...