RockOA SQL Injection Vulnerability (CNVD-2021-10485)

RockOA Xinhuo is an open source office OA system. Rockoa v1.8.7 version of the existence of SQL injection vulnerability , the vulnerability wwordAction.php parameters in the user input is not effectively filtered , a remote attacker by obtaining the injection of SQL statements to execute access t...

RockOA SQL Injection Vulnerability (CNVD-2021-10487)

RockOA Xinhuo is an open source office OA system. Rockoa v1.8.7 version of the existence of SQL injection vulnerability , the vulnerability customerAction.php in the filtering parameter does not do effective filtering of user input , a remote attacker through the injection of SQL statements to...

SQL Injection Vulnerability in KTO's Fully Intelligent Parking Video Charging System (CNVD-2021-11818)

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in KOTO's fully intelligent parking video charging system. An attacker can exploit the...

SQL Injection Vulnerability in the Website Building System of Beijing Jingji Technology Co.

Beijing Jingji Technology Co., Ltd - 11 years of service Internet basic information services. The main business are: website filing business, hosting, space rental, domain name registration, website construction, small program development, network operation and maintenance, one-stop solution...

SQL Injection Vulnerability in Shield Spirit Voting Sucker System (CNVD-2020-62877)

Shield Spirit Voting Powder Sucking System can be applied to the public number, through the WeChat public number of the message interface to collect the user to send the vote number of the data to reach the vote, with anti-brush voting voting function, but also efficiently suck the live powder...

SQL Injection Vulnerability in Situo Travel CMS Website Construction System of Sichuan Situo Smart Travel Software Co.

SituTravel CMS Website Builder is a self-developed website management system suitable for building travel websites. Ltd. SITO Travel CMS website builder system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Jincheng Youyi Network Technology Co.

Jincheng Youyi Network Technology Co., Ltd. was founded in 2012, the company's main website construction services, website optimization services, WeChat public platform, small program development and marketing, public platform on behalf of the operation of a full range of solutions. There is a SQ...

SQL injection vulnerability in the new*** page of the website building system of Henan Yue Longmen Science and Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. Ltd. station building system new page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

SQL Injection Vulnerability in the Website Building System of Ruian Uber Technology Co.

Ltd. is a social public to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM desig...

SQL Injection Vulnerability in Heybbs 1.2 ms***_de***.php File

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. A SQL injection vulnerability exists in the Heybbs 1.2 msde.php file, which can be exploited by attackers to obtain database information...

SQL Injection Vulnerability in Longyan Xunsou Network Technology Co.

Longyan Xunsou Network Technology Co., Ltd. is a company engaged in B2B e-commerce operation technology research and informationization services. There is a SQL injection vulnerability in Longyan Xundsou Network Technology Co., Ltd's website building system, which can be exploited by attackers to...

SQL Injection Vulnerability in LJCMS

LJCMS adopts PHP + Mysql architecture, is a very SEO friendly, full-featured, safe and stable, support multi-terminal display and extremely simple to use enterprise station building system. LJCMS has SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

SQL injection vulnerability in news****.php of website building system of Chaozhou Weipai Network Technology Co.

Chaozhou Weipai Network Technology Co., Ltd. focuses on micro-platform planning and development, leveraging on the WeChat public platform and open platform, customized display, interaction, sharing, promotion and sales in one of the micro-platform. Chaozhou City Weipai Network Technology Co., Ltd...

SQL Injection Vulnerability in Jinwei Mobile Mall System or***.php File

Jinwei mobile mall system is a micro-business customers with a public number, imitation hand Tao page layout, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory control, subdivided...

SQL Injection Vulnerability in the co***.php file of Yunye CMS Backend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background co.php file of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Langxin Transportation System of Shenzhen Langxin Interconnection Technology Co.

Loxson Internet is a professional logistics informationization solution provider, dedicated to providing enterprises with consolidation system, international forwarding system, logistics website construction and other services. There is a SQL injection vulnerability in the Langxin Collective...

SQL Injection Vulnerability in Ocean CMS

Ocean CMS is designed to solve the core needs of station owners and content management system, a set of programs to adapt to the computer, cell phone, tablet, APP multiple terminal entrances, without any encryption code, safe and secure station-building tools. Ocean CMS has SQL injection...

SQL injection vulnerability in p**w.asp page of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the professional network companies, is based on the Internet to provide a comprehensive e-commerce...

SQL injection vulnerability in seacms backend (CNVD-2019-40974)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in asp website builder system pr***.asp of Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...