BlueCMS suffers from SQL injection vulnerability (CNVD-2021-46836)

Bluecms is an asp+access for the development of enterprise website cms. BlueCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in TPCMS

TPCMS is an open source cms written by thinkphp. TPCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

TPCMS suffers from SQL injection vulnerability (CNVD-2021-46839)

TPCMS is an open source cms written by thinkphp. TPCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

PT-2021-10499

Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue is related to a SQL injection vulnerability. It arises from the default task edituser.php files failing to properly filter the csa to user parameter. This allows remote attackers to...

CVE-2020-20474: Improper Neutralization of Special Elements used in an SQL Command

White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the defaulttaskedituser.php files failing to filter the csatouser parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in 07FLY-CRM

07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM SQL injection vulnerability , an attacker can use this vulnerability to obtain sensitive information in the databa...

07FLY-CRM suffers from SQL injection vulnerability (CNVD-2021-46255)

07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM SQL injection vulnerability , an attacker can use this vulnerability to obtain sensitive information in the databa...

07FLY-CRM suffers from SQL injection vulnerability (CNVD-2021-46253)

07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM SQL injection vulnerability , an attacker can use this vulnerability to obtain sensitive information in the databa...

YouDianCMS suffers from SQL injection vulnerability (CNVD-2021-46899)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability. Attackers can use the vulnerability to obtain sensiti...

SQL Injection Vulnerability in Hospital Management System

Hospital Management System is a hospital management tool for users. The Hospital Management System suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-45218)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in the Equipment Management System of Shenzhen Chaohenghui Technology Co.

LELIGHT is the brand of wireless network series products independently developed by Shenzhen Chaohanghui Network Technology Co., Ltd, which covers: intelligent gateway, digital bridge, intelligent wireless router, POE switch and so on. Shenzhen Chaohanghui Equipment Management System has a SQL...

CVE-2021-32582

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

PT-2021-19796

Name of the Vulnerable Software and Affected Versions ConnectWise Automate versions prior to 2021.5 Description A blind SQL injection issue exists in core agent inventory communication, allowing an attacker to extract database information or administrative credentials from an instance via crafted...

CVE-2021-32582: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

SQL Injection Vulnerability in Traceability Management System of Heilongjiang Ligao Technology Co.

Heilongjiang Ligao Technology Co., Ltd. is the only total solution provider in the industry. A SQL injection vulnerability exists in the traceability management system of Heilongjiang Ligao Technology Co., Ltd. and can be exploited by attackers to obtain sensitive information from the database...

BlueCMS suffers from SQL injection vulnerability (CNVD-2021-45941)

BlueCMS is a free professional local portal system developed by open source combination PHP + MYSQL. BlueCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Farmers' Credit Information System of Nanning Desi Technology Co.

Nanning Desi Technology Co., Ltd, business scope includes computer software development and technical services; computer, office equipment sales and maintenance, etc.. A SQL injection vulnerability exists in the Farmer Credit Information System of Nanning Desi Technology Co. An attacker can utili...

Shanghai Danfan Network Science and Technology Co., Ltd. builds website system with SQL injection vulnerability (CNVD-2021-45217)

Huaxia Chemical Network was founded in 2000, is founded by Shanghai Danfan Network Technology Co., Ltd, is for the chemical industry to provide safe, efficient, multi-functional, systematic supporting B2B e-commerce platform of professional website. Shanghai Danfan network science and technology...

SQL Injection Vulnerability in Blue Ocean Premier Billing Management System (CNVD-2021-43937)

Blue Ocean Premier Billing Management System is a network security operation management system that is based on realizing network operation, centering on enhancing global security and improving management efficiency. The Blue Ocean Excellence Billing Management System suffers from a SQL injection...