07FLY-CRM suffers from SQL injection vulnerability (CNVD-2021-46886)

07FLY-CRM is a domestic open source general-purpose customer management system . 07FLY-CRM has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

White Shark System (WSS) SQL Injection Vulnerability (CNVD-2021-44705)

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A SQL injection vulnerability exists in White Shark...

07FLY-CRM suffers from SQL injection vulnerability (CNVD-2021-46885)

07FLY-CRM is a domestic open source general-purpose customer management system . 07FLY-CRM has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-22169

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\appointment-history.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2021-20736

NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the database via unspecified vectors...

SQL Injection Vulnerability in Shenzhen Hankuang Electronics Technology Co.

Shenzhen Hankuang Electronic Technology Co., Ltd. is a national energy industry water, electricity, gas, heat, specializing in the development, production and operation of energy consumption monitoring system, urban energy management and energy-saving service platform, combustible hazardous gas...

AKCMS suffers from SQL injection vulnerability (CNVD-2021-47150)

AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Engineering Enterprise Management Platform of Chongqing Panopto Software Co. Ltd (CNVD-2021-47188)

Engineering Enterprise Management is an integrated web-based information platform that incorporates all the operations of the engineering enterprise company and the project department. There is a SQL injection vulnerability in the engineering enterprise management platform of Chongqing Panoptic...

SQL Injection Vulnerability in Engineering Enterprise Management Platform of Chongqing Panopto Software Company Limited (CNVD-2021-47187)

Engineering Enterprise Management is an integrated web-based information platform that incorporates all the operations of the engineering enterprise company and the project department. There is a SQL injection vulnerability in the engineering enterprise management platform of Chongqing PPC Softwa...

AKCMS suffers from SQL injection vulnerability (CNVD-2021-47152)

AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

AKCMS suffers from SQL injection vulnerability (CNVD-2021-47151)

AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

PT-2021-14192

Name of the Vulnerable Software and Affected Versions: GROWI versions prior to v4.2.20 Description: A NoSQL injection issue allows a remote attacker to obtain and/or alter the information stored in the database via unspecified vectors. Recommendations: For versions prior to v4.2.20, update to...

CVE-2020-22168: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\change-emaild.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22165: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22174: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22175: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsreports.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

PT-2021-10736 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns a SQL injection vulnerability located in the hmsregistration.php file. This vulnerability can be exploited by remote unauthenticated users to obtain sensitive...

CVE-2020-22173: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22172: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\getdoctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2020-22170: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\getdoctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...