SQL injection vulnerability in seacms backend ad***_co***.php page (CNVD-2019-41066)

seacms ocean video management system, ocean cms is a video-on-demand system based on PHP + MySql technology. There is a SQL injection vulnerability in the adco.php page in the background of seacms. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in the Frontend of Laboratory Integrated Management System of Hunan Santang Information Technology Co.

Hunan Suntang Information Technology Co., Ltd. takes IT operation and maintenance integration platform and IT operation and maintenance service sharing platform as the core, and builds "Internet of Things" type IT integration operation and maintenance platform with the business system supplemente...

SQL Injection Vulnerability in Medical Online Exam System aj***.ashx Page of Nanjing Pinde Technology Co.

Nanjing Pintech medical online examination system enables users to realize the organization and management of online examination work. SQL injection vulnerability exists in the aj.ashx page of the medical online examination system of Nanjing Pinde Technology Limited Liability Company, which can b...

SQL Injection Vulnerability in Fiberhome's Eyeshot Series of Network Video Surveillance Platforms

Eyeshot series network video surveillance platform is an integrated video surveillance management system developed by Fiberhome Zongzhi based on IP network technology as the core of large-scale image remote monitoring, transmission, storage and management. Fiberhome Eyeshot series network video...

Wordpress Plugin Simple-e-commerce-shopping-cart DatabaseSQL Information Disclosure Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. An information disclosure vulnerability exists in the Wordpress plugin...

SQL Injection Vulnerability in Joomla! AppsConda Component ap***.php Page

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in the ap.php page of the Joomla! AppsConda component. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in the Registration Module of Guowei CMS School Cluster System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system registration module SQL injection vulnerability. Attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in MIPCMS ApiAdminUser.php Page

MIPCMS is a free and open source based on Baidu Mobile Accelerator MIP engine based on the development of articles, information, content management system, but also the system for the Internet webmasters, entrepreneurs and other groups to create SEO-optimized after the station-building system. A...

SDCMS Search Box SQL Injection Vulnerability

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. An SQL injection vulnerability exists in the SDCMS search box. The vulnerability stems from failure to filter user input. An attacker can exploit this vulnerability to obtain sensitive information from t...

Multiple IBM DB2 Product Information Disclosure Vulnerabilities

IBM DB2 is a relational database management system from IBM in the United States. An information disclosure vulnerability exists in IBM DB2 versions 10.1, 10.5, and 11.1 based on AIX, Linux, HP, Solaris, or Windows platforms. An attacker could exploit this vulnerability to obtain sensitive...

SQL Injection Vulnerability in YzmCMS email.php

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A SQL injection vulnerability exists in YzmCMS email.php. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2016-9272

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

SQL Injection Vulnerability in ModuleID Parameter of Online Exam System of Shenzhen Biaochi Information Technology Co.

The Enterprise Huitong Online Exam System is a set of professional application software suitable for the government, schools, enterprises and institutions to carry out internal network examination and evaluation through the Internet or LAN. A SQL injection vulnerability exists in the ModuleID...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.(CNVD-2016-06022)

Fuzhou Tranda Electronics Co., Ltd. is a high-tech enterprise specializing in software development, system integration, security services and other computer information services. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system is a data information management...

SQL Injection Vulnerability in Haitian OA System ID Parameter

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...

PHPizabi 0.848b C1 HFP3 - Database Information Disclosure Vuln

No description provided by source. -------------------------------------------------------- PHPizabi v0.848b C1 HFP3 database information exposure -------------------------------------------------------- I would like to state that I am in no way responsible for how this information is used. It is...

saspcms 0.9 - Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: SASPCMS Multiple Vulnerabilities Vendor: http://www.lgasoft.com Vulnerable Version: 0.9 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: SASPCMS is an ASP Conte...

Barracuda Spam Firewall 3.5.11.020, Model 600 - SQL Injection Vuln

No description provided by source. CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable ...

PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually...

PT-2011-43: Database information disclosure in Kayako Fusion

A vulnerability has been discovered in Kayako Fusion, which can be exploited by a malicious person with a 'staff' privileged user account. The vulnerability exists in the logic of report generation, which is based on Kayako Query Language KQL. An authorized 'staff' user can generate a report...