10211 matches found
ZZCMS suffers from a file upload vulnerability (CNVD-2020-59410)
ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...
SQL Injection Vulnerability in ZZCMS2020 Backend
ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in Dream CMS Backend Sq***.cl***.php File
Dream CMS lmxcms is developed using php language and mysql database, and adopts the mainstream MVC design model. Dream CMS background Sq.cl.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in Kinetix Software's Third-Party Logistics Collaboration Platform for Medical Devices
Established on March 06, 2007, Jinetek Software Jiangsu Co. The company's business scope includes: design, development and sales of software, logistics information service platform services; technical services and technical consulting in the field of Internet of Things; sales of electromechanical...
Zoho ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2020-54780)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...
PrestaShop SQL Injection Vulnerability
PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A SQL injection vulnerability exists in PrestaShop version 1.7.5.0, versions prior to 1.7.6.8. The...
Observium SQL Injection Vulnerability (CNVD-2020-54789)
Observium is a low-maintenance auto-discovery network monitoring platform that supports multiple device types, platforms and operating systems. Observium suffers from an SQL injection vulnerability. An attacker can exploit this vulnerability by injecting malicious SQL statements via the cookie...
CVE-2020-24593
Mitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and access user credentials due to improper input validation...
CVE-2020-13500
SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter ClassName in CHaD.asmx is vulnerable to unauthenticated SQL...
SQL Injection Vulnerability in DbCms of Xinxiang Dabang Computer Software Co.
DbCms is a content management system. DbCms by Xinxiang Dabang Computer Software Co. Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Joomla! paGO Commerce SQL Injection Vulnerability
Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla! paGO Commerce. An attacker can exploit the vulnerability to obtain sensitive database information...
CVE-2020-25379
Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the 'Manufacturer' parameter which allows an authenticated attacker to inject a malicious SQL query...
Hyland OnBase SQL Injection Vulnerability (CNVD-2020-52045)
Hyland OnBase is an enterprise information platform for managing your content, processes and cases. Hyland OnBase suffers from a SQL injection vulnerability. The vulnerability can be exploited by an attacker to conduct a SQL injection attack via the TableName, ColumnName, Name, UserId, or Passwor...
SQL Injection Vulnerability in Aj***.ashx File of CMS Web Publishing System of Nanjing Yu Hou Network Technology Co.
Nanjing Yu Hou Network Technology Co., Ltd. is a provider and successful practitioner of regional education informatization and school wisdom education solutions, has provided education informatization software system development and services for a number of cities, districts and schools. A SQL...
ZZCMS suffers from SQL injection vulnerability (CNVD-2020-58516)
ZZCMS is a content management system for Merchants Network. ZZCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in BaiLian Mall System
BaiLian mall system is a set of computer version of the mall + mobile version of the website + micro mall enterprise wechat public number secondary development + palm sales through the mobile mall + BaiLian bearing network www.bearing.cn the whole network of promotion and publicity in one of the...
CVE-2020-25004
Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code...
openSIS SQL Injection Vulnerability (CNVD-2020-50948)
openSIS is a free, open source student information system/school management software. An SQL injection vulnerability exists in the id parameter in CourseMoreInfo.php in OS4Ed openSIS 7.3, which can be exploited by an attacker sending an HTTP request to conduct an SQL injection attack...
openSIS SQL Injection Vulnerability (CNVD-2020-50527)
openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the courseperiodid parameter in MassScheduleSessionSet.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection...