phpList SQL Injection Vulnerability (CNVD-2020-41812)

phpList is an open source newsletter and email marketing software from phpList UK. A SQL injection vulnerability exists in phpList 3.5.4 and earlier versions. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can...

CVE-2020-15008

A SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or 2019.12. A SQL Injection in the probe implementation to save data to a custom table exists due to inadequate server side validation. As the code creates dynamic SQL for the insert statement and utilizes the user...

S-CMS School Building System aj***.php suffers from SQL Injection Vulnerability

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS school website builder system aj.php SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database...

VulnCheck KEV: CVE-2018-7765

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter...

SQL Injection Vulnerability in New*** Page of Arctic Technology Website Builder System

Arctic Technology is mainly engaged in website construction, network promotion and enterprise WEB application team, is committed to enterprises, individuals, associations and organizations to provide website planning, construction, network maintenance and promotion services. There is a SQL...

Joomla! J2 JOBS SQL Injection Vulnerability

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla! J2 JOBS. The vulnerability stems from a database application that lacks validation of externally entered SQL statements. An attacker can exploit t...

SQL Injection Vulnerability in Personnel Payroll System of Schoolless Software Technology Co.

School Worry-free Software Technology Co., Ltd. is a high-tech development team engaged in the research and system development of educational software teaching applications. A SQL injection vulnerability exists in the personnel payroll system of SchoolWorryFree Software Technology Limited, which...

SQL Injection Vulnerability in Hubei Guosheng Technology Co.

Hubei Guosheng Technology Co., Ltd, is a company specializing in website construction, small program mall, micro distribution system and other services. Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the...

SQL injection vulnerability in deituiCMS (CNVD-2020-45160)

deituiCMS is a PHP-based open source content management system. A SQL injection vulnerability exists in deituiCMS, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Gal***-co***.php Page of Website Building System of Qingdao Shangzhixin Network Technology Co.

Qingdao Business to letter network technology limited company is a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services of high-tech specialized companies. There is a SQL injection vulnerability in gal-co.php, which can be...

SQL Injection Vulnerability in Ac***.php File of Xinhuo OA Office System

Xinhu OA office system is an open source online office system. The Ac.php file of Xinhao OA Office System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

TuziCMS v3.0 Ma*** Pa***.cl***.php suffers from SQL injection vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 Ma Pa.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...

Mattermost Server SQL Injection Vulnerability (CNVD-2020-48238)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A SQL injection vulnerability exists in Mattermost Server versions prior to 4.3.0, prior to 4.2.1, and prior to 4.1.2. The vulnerability stems from a lack of validation of externally entered SQL...

SQL injection vulnerability in xw***.php page of website building system of Hangzhou Daler Network Information Technology Co.

Hangzhou Daler Network Information Technology Co., Ltd. is an enterprise engaged in Internet application services, is to provide enterprise website construction, Baidu bidding Hosting, Taobao store decoration, the whole network integrated marketing, domain name registration and space server agent...

SQL Injection Vulnerability in Jinhua Yitoa Website Building System

Ltd. is a creative design company dedicated to online marketing and brand image strategy design. There is a SQL injection vulnerability in Jinhua Yitu Network website builder system, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Hefei Blue Collar Business Information Co.

Hefei Blue Collar Business Information Co., Ltd. is a professional Internet basic application service operators, mainly engaged in Hefei website construction, website planning and so on. There is a SQL injection vulnerability in Hefei Blue Collar Business Information Co., Ltd.'s website...

SQL Injection Vulnerability in PHPCMS of Coolmile (Beijing) Culture Media Co.

PHPCMS is a self-developed framework using the OOP object-oriented approach. There is a SQL injection vulnerability in PHPCMS of CoolSkate Beijing Culture Media Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

ShopsN open source mall system aj*** there are SQL injection vulnerabilities

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system aj there is a SQL injection...

SQL Injection Vulnerability in PIMS Online Order Management System of Dotop Technology Inc.

PIMS online order management system is suitable for single page ordering website, general product ordering website and other ordering websites. A SQL injection vulnerability exists in DotTop's PIMS Online Order Management System, which can be exploited by attackers to obtain sensitive database...

SQL Injection Vulnerability in Supplier Inquiry System Co***.aspx Page

Shanghai Haidian Software Co., Ltd. is a provider of informatization solutions focusing on the pharmaceutical distribution industry. A SQL injection vulnerability exists in the Co.aspx page of the supplier query system, which can be exploited by an attacker to obtain sensitive information from th...