PT-2020-15680 · Vinoj Cardoza · Vinoj Cardoza Wordpress Poll Plugin

Name of the Vulnerable Software and Affected Versions: Vinoj Cardoza WordPress Poll Plugin versions prior to v37 Description: The issue allows users to execute SQL statements by crafting specific input, potentially leading to the dumping of the entire target's database. This is due to a lack of...

SQL Injection Vulnerability in Warehouse System and Logistics Management System of Shanghai Wuchuang Information Technology Co.

Ltd. is committed to using Internet technology to promote the logistics and supply chain industry management and service innovation, and enhance the manufacturing industry to upgrade the means of service. There is a SQL injection vulnerability in the warehousing system and logistics management...

SQL Injection Vulnerability in the Website Building System of Hubei Guosheng Science and Technology Co.

Hubei Guosheng Technology Co., Ltd. is a company specializing in website construction, small program mall, micro distribution system and other services. Ltd. There is a SQL injection vulnerability in the website building system, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Xi'an Bailian Network Technology Co.

Xi'an Bailian Network Technology Co., Ltd's website building system is widely used in bearing, seal, transmission parts, lubrication, motor and other mechanical parts industry. There is a SQL injection vulnerability in the website building system of Xi'an BaiLian Network Technology Co., Ltd, whic...

Anhui Hope Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2020-48244)

Anhui Hope Network Technology Co., Ltd. is an Internet basic product service provider mainly engaged in website construction, network promotion and network marketing. Anhui Hope Network Technology Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerabili...

SugarCRM SQL Injection Vulnerability (CNVD-2020-46297)

SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. A SQL injection...

SQL Injection Vulnerability in Standard PepsiCo***.ashx Page of RunShen Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a high-tech company specializing in software development and information services. Ltd. SQL injection vulnerability exists in the Standard PepsiCo.ashx page, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Bu***.htm Page of Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. Ltd. home furnishing ERP management system Bu.htm page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

SQL injection vulnerability in ne***.asp page of the website building system of Shenyang Numerical Information Technology Co.

Shenyang Numerical Information Technology Co., Ltd. is a new technology enterprise engaged in Internet information service, e-commerce application and enterprise application system development. Shenyang number industry information technology limited company to build the system ne.asp page there i...

SQL Injection Vulnerability in Beijing Zhongcheng Kexin Integrated Management Platform

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a service provider of the whole tourism industry chain with a high market share in China. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin, which can be exploited by attackers to...

SQL Injection Vulnerability in Hualei Technology's Integrated Platform for Cross-Border E-Commerce

Hualei Technology is a company that provides customers with a variety of high-quality e-commerce logistics integration services, including orders, warehousing, distribution management and supporting services, system solutions. A SQL injection vulnerability exists in the cross-border e-commerce...

SQL Injection Vulnerability in Website Building System of Shenzhen Shenzhou Tongda Network Technology Co.

Shenzhen Shenzhou Tongda Network Technology Co., Ltd, provides Tencent enterprise mailbox, high-end website construction PC website, cell phone website, WeChat public account, SEO optimization and promotion, enterprise WeChat and other network infrastructure services and network marketing and...

SQL Injection Vulnerability in Website Building System of Shenzhen Shenzhou Tongda Network Technology Co.

Shenzhen Shenzhou Tongda Network Technology Co., Ltd, provides Tencent enterprise mailbox, high-end website construction PC website, cell phone website, WeChat public account, SEO optimization and promotion, enterprise WeChat and other network infrastructure services and network marketing and...

CTFtools

This repository is an offensive tool for web application exploitation, specifically targeting web servers. The primary vulnerability class is code execution RCE, with various exploitation techniques and payloads. The tool is designed to automate the exploitation process, making it easier for...

SQL Injection Vulnerability in the Website Building System of Beijing Turnaround Culture Development Co.

Beijing Turning Culture Development Co., Ltd. is the organization of various cultural and artistic exchanges, hosting exhibitions, books and magazines selection and editing, publishing agency, art design, painting and calligraphy framing exhibitions and displays exhibitions and sales, photography...

SQL Injection Vulnerability in Chongqing Manrong Network Technology Co.

Chongqing Manrong Network Technology Co., Ltd. formerly known as Chongqing Wizards Technology Co., Ltd. is a technology service provider focusing on customized development of management software, website construction and network marketing promotion. There is a SQL injection vulnerability in...

CentOS Web Panel SQL Injection Vulnerability (CNVD-2020-44590)

CentOS Web Panel CWP is a free web hosting control panel. A SQL injection vulnerability exists in the ajaxmailautoreply.php file in CentOS Web Panel cwp-e version 17.0.9.8.923, which originates from the program not properly validating a user-supplied string. An attacker could exploit this...

Fushun Zhonglian Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Fushun Zhonglian Network Technology Co., Ltd. is engaged in software development, PC, mobile site construction and planning and promotion. WeChat, micro-official network development and application. Multimedia network, etc. Comprehensive network company. Fushun City, the United Network Technology...

CVE-2020-3462

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could...

SpringBlade SQL Injection Vulnerability

SpringBlade is a set of microservices development platform. A SQL injection vulnerability exists in the DAO/DTO implementation in SpringBlade 2.7.1 and earlier versions. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An...