SQL Injection Vulnerability in the Teaching System of Beijing Oriental Centaline Education Technology Co.

Oriental Centrum is a developer, supplier and solution provider in the field of multimedia display and interactive teaching applications. A SQL injection vulnerability exists in the teaching system of Beijing Oriental Centrum Education Technology Co. Ltd. where an attacker can obtain database...

Multiple Vulnerabilities in e-cology, Panmicro's Collaborative Application Management Platform

Collaborative management application platform e-cology is a set of collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management and...

Joomla SQL Injection Vulnerability (CNVD-2015-06805)

Joomla is a content management system, developed with PHP + MySQL database, running on Linux, Windows, MacOSX, Solaris and many other platforms. Joomla has been disclosed to have a SQL injection vulnerability, the comprehensive use of the vulnerability, attackers can obtain the website database...

Joomla SQL Injection Vulnerability (CNVD-2015-06803)

Joomla is a content management system, developed with PHP + MySQL database, running on Linux, Windows, MacOSX, Solaris and many other platforms. Joomla has been disclosed to have a SQL injection vulnerability, the comprehensive use of the vulnerability, attackers can obtain the website database...

SQL Injection Vulnerability in the Hot.aspx Page Mid2 Parameter of Shanghai Caixa University Science and Technology Development Corporation's Kefa Online Query System

Shanghai Cai Da Science and Technology Development Corporation Kofa online query system is a comprehensive query system for financial information. The product has a SQL injection vulnerability, the vulnerability URL is: /hot.aspx?mid1=&mid2=&webid=, the vulnerability parameter is mid2, the attack...

SQL Injection Vulnerability in Xi'an Bureau Veritas Standard Edition Transaction Tenure Management System

Xi'an BitTorrent Software Co., Ltd. is a company that researches the business of government real estate management, and the standard version of the Transaction Tenure Management System is one of the management systems of the company. A SQL injection vulnerability exists in the standard version of...

SQL Injection Vulnerability in Travel E-commerce Platform Usid Parameter of Shenzhen Dingyue.

The tourism e-commerce platform is also a platform for a business system that uses electronic means to operate the tourism industry and its distribution system, based on a network as the main body, a tourism information base and an electronic business bank. SQL injection vulnerability exists in t...

Arbitrary File Upload Vulnerability in Panavision OA System

Panavision OA Office System is a coordination office software. A SQL injection vulnerability exists in Panmicro OA Office System, which can be exploited by an attacker to obtain sensitive information from a website database...

SQL Injection Vulnerability in Shenzhen Siliconware Sewise Live Server

SEWISE is a streaming media cloud computing company engaged in streaming media encoding, distribution and storage of audio and video. sewise live streaming server is a product of this company. A SQL injection vulnerability exists in SEWISE live server. An attacker can exploit the vulnerability to...

Directory Traversal Vulnerability in the vnet web management system of Zenith

COSHIDA VNet6 Professional Reference Station Receiver is one of COSHIDA's new VNet series of measurement systems, and it is also a professional reference station receiver specially designed for reference station applications. A directory traversal vulnerability exists in the COSHIDA vnet web...

Command Execution Vulnerability in the Cina vnet Web Management System

COSHIDA VNet6 Professional Reference Station Receiver is one of COSHIDA's new VNet series of measurement systems, and it is also a professional reference station receiver specially designed for reference station applications. A command execution vulnerability exists in the COSHIDA vnet web...

SQL Injection Vulnerability in Huizhou Business Network CMS System

A SQL injection vulnerability exists in the Huizhou Business Network CMS system. An attacker is allowed to exploit the vulnerability to obtain sensitive database information...

Arbitrary File Read Vulnerability in Jinhe IOAS Standard Office System for SMEs

Beijing Jinhe Network Co., Ltd. is an enterprise that provides informationization solutions and collaborative management software, and IOAS Standard Office System for Small and Medium-sized Enterprises is one of the products of Beijing Jinhe Network Co. IOAS is a product of Beijing JinHe Network...

Generalized SQL Injection Vulnerability in Seven Colors Network Website Builder System

A generic SQL injection vulnerability exists in the Seven Colors Network website builder system. The vulnerability allows attackers to obtain sensitive database information...

SQL Injection Vulnerability in reftype Parameter of Panmicro Collaboration Management Platform

Ltd. is a company that provides enterprise collaboration management software and application solutions. A SQL injection vulnerability exists in the reftype parameter of Panavision collaboration management platform. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Shanghai Jiaoda Withub's Court Litigation Service Platform

Shanghai Jiaoda Withub Information Industry Co., Ltd. is mainly engaged in computer network and network security integration, application software development, building intelligence system integration, as well as agent sales of IT products. The court litigation service platform is one of the...

JVN#92828286: Welcart vulnerable to SQL injection

Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a SQL injection CWE-89 vulnerability due to the processing of changeSort parameter in admin.php. Impact An attacker that can log in to WordPress with this plugin enabled may obtain or alter...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flow/flowtype_other.php Parameter

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flow/flowtypeother.php parameter, which can be exploited by an attacker to obtain sensitive information from the database...

TCCMSV9.0 Latest Version SQL Injection Vulnerability

TCCMS is a content management system. TCCMSV9.0 has multiple SQL injection vulnerabilities in app/controller/news.class.php, which can be exploited by attackers to either obtain sensitive database information...

SQL injection vulnerability in the view_xz.aspx?a= parameter of Ticketmaster software at Shanghai Shengdai Information Technology Co.

Ticketmaster is a specialized ticket management system for airline ticket agents. A SQL injection vulnerability exists in the viewxz.aspx?a= parameter of the Ticketmaster Software of Shanghai Shengdai Information Technology Company Limited, which allows an attacker to exploit the vulnerability to...