ZTE ZXIPTV-UCM SQL Injection Vulnerability

The ZTE ZXIPTV-UCM is a set-top box device from China's ZTE Corporation ZTE. A SQL injection vulnerability exists in ZTE ZXIPTV-UCM versions prior to 2.01.05.09. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the help of the 'opertype' parameter to...

ZTE ZXCDN-SNS SQL Injection Vulnerability

ZTE ZXCDN-SNS is a hardware device from ZTE Corporation ZTE, China. A SQL injection vulnerability exists in ZTE ZXCDN-SNS versions prior to 4.01.01. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the help of the 'aoData' parameter to disclose information...

Sql injection

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

Sql injection

SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information...

CVE-2017-10937

SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information...

CVE-2017-10937

SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information...

SQL injection vulnerability in UKcms v1.1.7 of Lingji Network Technology Co.

UKcms is a simple, flexible and powerful web content management system based on PHP7 and mysql technology. Lingji Network Technology Limited UKcms website builder v1.1.7 has SQL injection vulnerability, which can be exploited by attackers to obtain database sensitive information...

Sql injection

Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability. An unauthenticated user can perform a SQL injection in the command center which results in disclosure of database contents...

CVE-2017-0914

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database...

Sql injection

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database...

CVE-2017-0914

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database...

CVE-2017-0914

Removed by vendor...

SQL Injection Vulnerability in DuomiCms x3.0 Frontend

DuomiCms is a video-on-demand system designed for film and television station owners. SQL injection vulnerability exists in DuomiCms x3.0 frontend. An attacker can exploit the vulnerability to obtain sensitive database information...

Advance Loan Management System 2.4.2 Database Disclosure

========================================================================================================================================== | Title : Advance Loan Management System Version 2.4.2 database Disclosure Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : Win ...

CVE-2012-3331

IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048...

HTML Template Engine 1.0 Database Disclosure

| Title : html template engine 1.0 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on: windows 8.1 FranASSais V.Pro | Vendor : SourceForge: Kanator / http://adyou.me/4TVD ========================================================= !/usr/bin/perl -w Autho...

Hava Tahmin 1.0 Database Disclosure

======================================================================== | Title : hava tahmin v1.0 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v1.0 | Vendor :...

Haraj 1.1 Database Disclosure

======================================================================== | Title : Haraj v1.1 free Database Disclosure vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v1.1 | Vendor : http://www.hascript.com/ | Dork : V1....

qEngine Internal 16.1.0 Build 20170824 Database Disclosure

============================================================================================================================ | Title : qEngine Internal V16.1.0 build 20170824Database Disclosure Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : Win 10 X64 /FrPro | |...

Gateway 1.0 Database Disclosure

======================================================================== | Title : gateway v1.0 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v1.0 | Vendor :...