Hurricane (Shenzhen) Software Co., Ltd. Hurricane CMS suffers from SQL injection vulnerabilities (CNVD-2021-35571)

Hurricane CMS is a content management system developed using PHP mysql. Hurricane Shenzhen Software Co., Ltd. Hurricane CMS SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Guangzhou Good Intelligence Information Technology Co.

Guangzhou Good Intelligence Information Technology Co., Ltd. business scope: software development; information system integration services; information technology consulting services; data processing and storage services; computer technology development. Guangzhou Good Intelligence Information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-35559)

Extreme CMS is an open source and free CMS web content management system in PHP language. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

b2evolution Command Injection Vulnerability

b2evolution is a community content management system based on PHP and MySQL. A command injection vulnerability exists in b2evolution v7.2.2-stable, which can be exploited by a remote attacker to obtain sensitive database information by injecting SQL commands into the "cf name" parameter when...

OURPHP suffers from SQL injection vulnerability (CNVD-2021-34782)

OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

OURPHP suffers from SQL injection vulnerability (CNVD-2021-34776)

OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

OURPHP suffers from SQL injection vulnerability (CNVD-2021-34781)

OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

b2evolution 7-2-2 - (cf_name) SQL Injection Exploit

Exploit Title: b2evolution 7-2-2 - 'cfname' SQL Injection Author: @nu11secur1ty Vendor: https://b2evolution.net/ Link: https://b2evolution.net/downloads/7-2-2 CVE: CVE-2021-28242 Proof: https://streamable.com/x51kso + Exploit Source: !/usr/bin/python3 Author: @nu11secur1ty CVE-2021-28242 from...

SQL Injection Vulnerability in Cross-border E-commerce Order System of Hualei Information Technology Co.

Founded in 2013, Hualei Information Technology Co., Ltd. is a professional information technology service provider. A SQL injection vulnerability exists in the cross-border e-commerce order system of Hualei Information Technology Co. An attacker can exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in the Website Building System of Lianchuang Internet (Beijing) Technology Limited (CNVD-2021-35865)

Ltd. is a provider of interactive web website building/marketing services. A SQL injection vulnerability exists in the website builder system of Lianchuang Internet Beijing Technology Co. The vulnerability can be exploited by an attacker to obtain sensitive information from the database...

b2evolution 7-2-2 SQL Injection

Exploit Title: b2evolution 7-2-2 obtaining sensitive database information by injecting SQL commands into the "cfname" parameter Author: @nu11secur1ty Testing and Debugging: @nu11secur1ty Date: 05.06.2021 Vendor: https://b2evolution.net/ Link: https://b2evolution.net/downloads/7-2-2 CVE:...

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-35527)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

YMBCMS 9.2 suffers from SQL injection vulnerability (CNVD-2021-36240)

YMBCMS website management system also known as YMBCMS is one of the independent research and development products of Hebei OuRunTianTeng YMBCMS network studio.YMBCMS set computer station, cell phone station, WeChat public platform, small program, APP in one, shared space, data synchronization, is...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35732)

jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34285)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in NGFW of Next Generation Firewall of Beijing Netcom Technology Co.

Ltd. is a leading provider of network application management equipment in China, focusing on the research and analysis of the most cutting-edge trends in the field of network application management, providing users with advanced network application management technology, products and solutions,...

SQL Injection Vulnerability in NGFW of Next Generation Firewall of Beijing Netcom Technology Co. Ltd (CNVD-2021-34225)

Ltd. is a leading provider of network application management equipment in China, focusing on the research and analysis of the most cutting-edge trends in the field of network application management, providing users with advanced network application management technology, products and solutions,...

SQL Injection Vulnerability in Youdot CMS System

Founded in 2012, Changsha Youdot Software Technology Co., Ltd. provides small and medium-sized enterprises SMEs with integrated solutions for website construction, new retail smart stores, micro-sites, micro-malls, live selling, and multi-end mini-programs. A SQL injection vulnerability exists in...

SQL Injection Vulnerability in BigAnt Manager

BigAnt is a leading brand of domesticated enterprise instant messaging software for e-government. A SQL injection vulnerability exists in BigAnt Manager. An attacker can exploit the vulnerability to obtain sensitive database information...

Cynthia has a SQL injection vulnerability

Cynthia is an issue management / bug management / task management / project management system. Cynthia suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...