CVE-2020-25889

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...

PT-2020-13602 · Processmaker · Processmaker

Name of the Vulnerable Software and Affected Versions: ProcessMaker version 3.4.11 Description: The sort parameter in the download page "/sysworkflow/en/neoclassic/reportTables/reportTables Ajax" is vulnerable to SQL injection. A specially crafted HTTP request can cause an SQL injection. An...

CVE-2019-19876

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script was vulnerable to SQL injection, a different vulnerability than CVE-2019-10006...

SQL injection vulnerability in TEMMOKUMVC in***.php file

TEMMOKUMVC is Pizhou Tianmu Network Technology Co., Ltd. developed a professional PHP MySQL products , using independent MVC framework for large and medium-sized enterprises and open source MVC. TEMMOKUMVC in.php file has a SQL injection vulnerability . Attackers can exploit the vulnerability to...

SQL Injection Vulnerability in Hsycms Frontend

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. Hsycms suffers from a SQL injection vulnerability in the frontend. An attacker can exploit the vulnerability to obtain sensitive...

News Script PHP Pro SQL Injection Vulnerability

News Script PHP Pro is a PHP/MySQL based web script from Simple PHP Scripts for displaying news on your website. News Script PHP Pro 2.3 suffers from a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the id parameter in the editNews action...

Vulnerability fixed in Red Hat JBoss Enterprise Application Platform

A vulnerability has been fixed in Red Hat JBoss Enterprise Application Platform. The vulnerability allows a malicious party to able to execute an SQL injection and thereby obtain sensitive data to obtain sensitive data. Red Hat has released updates to fix the vulnerability. More information can b...

SQL Injection Vulnerability in FE Business Assistance Platform (CNVD-2020-69475)

Zhuhai Feiqi Software Co., Ltd "Feiqi Software", founded in 1998 formerly Zhuhai UFIDA Software Co., Ltd. was founded in 1998, is a software vendor focusing on the research, development and service of industry collaboration and integration platform. A SQL injection vulnerability exists in FE...

SQL Injection Vulnerability in FE Business Assistance Platform

Zhuhai Feiqi Software Co., Ltd "Feiqi Software", founded in 1998 formerly Zhuhai UFIDA Software Co., Ltd. was founded in 1998, is a software vendor focusing on the research, development and service of industry collaboration and integration platform. A SQL injection vulnerability exists in FE...

Micro Focus NetIQ Identity Manager SQL Injection Vulnerability

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. A security vulnerability exists in...

SQL Injection Vulnerability in Miwei Smart Party School System

Chongqing Miwei Technology Co., Ltd. is a leading provider of intelligent party school construction and solutions. There is a SQL injection vulnerability in the Mimi Smart Party School system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Intelligent Internet of Things System of Nanjing Jiuzhe Software Technology Co.

Nanjing Jiuzhe Software Technology Co., Ltd. business scope includes: software development, technical services, technical consulting services, technology transfer and so on. Nanjing Jiuzhe Software Technology Co., Ltd. intelligent Internet of things system SQL injection vulnerability, attackers c...

SourceCodester Online Clothing Store SQL注入漏洞

SourceCodester Online Clothing Store is a website builder system from SourceCodester, Inc. that provides online clothing store functionality. A SQL injection vulnerability exists in SourceCodester version 1.0. The vulnerability stems from the program failing to properly validate user input, which...

CVE-2020-25952

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co. Ltd (CNVD-2020-68883)

Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection vulnerability in the website building system of Inner Mongolia Hohai Trading Co. Attackers can use the vulnerability ...

SQL Injection Vulnerability in the Website Building System of Beijing Zhongcheng Kexin Technology Development Co.

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the website building system of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain sensitive...

SQL Injection Vulnerability in waychar Enrollment System Update File

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the waychar registration system update file, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend re***.php Page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Front lo***.php Page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

SQL Injection Vulnerability in Incu Online Education System (CNVD-2020-67119)

Incu online education system is the Java version of the open source online school source code building system . SQL injection vulnerability exists in Incu Online Education System. Attackers can use the vulnerability to obtain sensitive information in the database...