CVE-2021-28295

CVE-2021-28295 affects Online Ordering System 1.0. The vulnerability is an unauthenticated SQL injection in the design.php path under /onlineordering/GPST/admin/ that may disclose database information. Multiple sources (NVD, Red Hat, PRION, CVE listings) corroborate the issue and timing, with exp...

CVE-2021-28295

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

Egavilan Media Bakeshop Online Ordering System SQL注入漏洞

Egavilan Media Bakeshop Online Ordering System is a Javascript-based code repository that supports interaction with git repositories from Egavilan Media. A SQL injection vulnerability exists in Online Ordering System 1.0, which allows unauthenticated SQL injection, leading to the disclosure of...

SQL injection vulnerability in the background lo***.php page of Shield Spirit merchandise promotion system

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

CVE-2020-24441

Adobe Acrobat Reader for Android version 20.6.2 and earlier does not properly restrict access to directories created by the application. This could result in disclosure of sensitive information stored in databases used by the application. Exploitation requires a victim to download and run a...

SQL Injection Vulnerability in UFIDA U8-OA

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA, which can be exploited by attackers to obtain sensitive information from the database...

B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure

Exploit Title: B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure Date: 2020-09-16 Exploit Author: LiquidWorm Vendor Homepage: https://www.b-swiss.com Version: 3.6.5 Affected version: 3.6.5,3.6.2,3.6.1,3.6.0,3.5.80,3.5.40,3.5.20,3.5.00,3.2.00,3.1.00 B-swiss 3 Digital Signage System 3.6....

B-swiss 3 Digital Signage System 3.6.5 Database Disclosure

Summary Intelligent digital signage made easy. To go beyond the possibilities offered, b-swiss allows you to create the communication solution for your specific needs and your graphic charter. You benefit from our experience and know-how in the realization of your digital signage project...

B-swiss 3 Digital Signage System 3.6.5 Database Disclosure

B-swiss 3 Digital Signage System 3.6.5 Database Disclosure Vendor: B-Swiss SARL | b-tween Sarl Product web page: https://www.b-swiss.com Affected version: 3.6.5 3.6.2 3.6.1 3.6.0 3.5.80 3.5.40 3.5.20 3.5.00 3.2.00 3.1.00 Summary: Intelligent digital signage made easy. To go beyond the possibiliti...

CVE-2020-13405

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request...

CVE-2020-13405

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request...

CVE-2020-13405

Microweber

CVE-2020-13405: MicroWeber Unauthenticated User Database Disclosure

The post CVE-2020-13405: MicroWeber Unauthenticated User Database Disclosure appeared first on Rhino Security Labs...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-44107)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-44108)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Stone Technology Online Exam System kg***_sz***.php Page

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores. A...

SQL Injection Vulnerability in 120 Emergency Command Center Web Service System (CNVD-2020-31564)

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the 120 Emergency Command Center Web Service System, which can be exploite...

SQL Injection Vulnerability in Easy B2C Mall System V1.1 version po***.php

Easy B2C mall system is a mall system based on open source framework development. Easy B2C mall system V1.1 version po.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Heybbs se***.php File

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs se.php file has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in GoWeb Web System

Goodposition Technology Co., Ltd. is a company that provides web application services to users. A SQL injection vulnerability exists in the GoWeb web system, which can be exploited by attackers to obtain sensitive information from the database...