CVE-2018-20329: Improper Neutralization of Special Elements used in an SQL Command

Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue which may optionally be made public to extract and/or modify database information...

SQL Injection Vulnerability in PbootCMS Backend

PbootCMS is a new core open source enterprise building system developed by Avantech. There is a SQL injection vulnerability in PbootCMS backend. Attackers can use this vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Xinhoo Collaboration Office v1.8.3

Xinhuo Co-operation Office System is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhao Co-operation Office v1.8.3, which can be exploited by attackers to obtain sensitive database information...

Zoho ManageEngine OpManager 12.3 SQL Injection Vulnerability

Zoho ManageEngine OpManager versions 12.3 before 123238 suffer from a remote SQL injection vulnerability in the getGraphData API. I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API. II. CVE REFERENCE...

SQL Injection Vulnerability in Zhuhai Goling Information Air Quality Online Monitoring System

Zhuhai Goling Information Technology Co., Ltd. is a national high-tech enterprise specializing in the research and development, system integration, production, sales and technical services of network information security equipment, special communication equipment, ecological environment monitorin...

CVE-2018-15719

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information...

S-CMS e-commerce system SQL injection vulnerability in front-end ms***/fo***.php page

S-CMS e-commerce system is an e-commerce software. A SQL injection vulnerability exists in the front-end ms/fo.php page of S-CMS e-commerce system. An attacker can exploit the vulnerability to obtain sensitive database information...

PHPOK 5.0.055 SQL Injection Vulnerability in ca***_co***.php File

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A SQL injection vulnerability exists in the PHPOK 5.0.055 caco.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL injection vulnerability in DOUPHP ba***.php file

DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. A SQL injection vulnerability exists in the DOUPHP ba.php file. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in ESPCMS P8 Backend Me***.php File

ESPCMS is an enterprise website management system built on LAMP development. A SQL injection vulnerability exists in the ESPCMS P8 backend Me.php file. Attackers can use this vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in HuCart ar***.php Page

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version ar.php page SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in PhpMywind we***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind we.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in PhpMywind ad***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind ad.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in HuCart adm***.php Page

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version adm.php page SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Incentive Technology's Website Construction System

Ltd. is a network company specializing in Internet technology services, network technology development and application in one. A SQL injection vulnerability exists in the website construction system of Incentive Technology. An attacker can use this vulnerability to obtain sensitive information in...

Hangzhou Lebang website building system has SQL injection vulnerability

Hangzhou Lebang Technology Co., Ltd. is an Internet digital service integration organization integrating website mobile platform construction, mobile application development, network marketing integration and operation outsourcing. A SQL injection vulnerability exists in the Hangzhou Lebang websi...

SQL Injection Vulnerability in Network Office System of Beijing Hanqing Weiye Technology Co.

Ltd. is a company dedicated to the research and development of enterprise management software for the publishing industry, medical industry, agriculture, immigration industry and other research and development of enterprise management software, providing quality software services. A SQL injection...

JVN#55263945: Multiple vulnerabilities in RICOH Interactive Whiteboard

RICOH Interactive Whiteboard provided by RICOH COMPANY, LTD. contains multiple vulnerabilities listed below. Command injection CWE-94 - CVE-2018-16184 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 9.8 CVSS v2| AV:N/AC:L/AU:N/C:C/I:C/A:C| Bas...

SQL Injection Vulnerability in HansCMS V6.0.0

Hefei Hans Information Technology Co., Ltd. is committed to the research and development of hospital informationization and intelligent system software products, integrated health management platform software products, as well as a series of terminal products, etc., and is a leading provider of...

SQL Injection Vulnerability in ThinkSNS V4

ThinkSNS is an open source social system under Wise Software Beijing Co. ThinkSNS V4 suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...