SQL Injection Vulnerability in pr***.asp Page of Zhengguang Network Station Building System

Positive Light Network is an Internet application service provider. A SQL injection vulnerability exists in the pr.asp page of the Zhengguang Network website builder system, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in the Pro*** Page of the Website Building System of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. Ltd. station building system pro page there is a SQL injection vulnerability, the attacker can use the vulnerability to obtain database...

rConfig SQL Injection Vulnerability (CNVD-2020-38219)

rConfig is an open source network configuration management utility . A SQL injection vulnerability exists in rConfig 3.9.4 and earlier versions, which stems from the program storing node passwords in plaintext. An attacker can exploit this vulnerability to access a listened network device...

rConfig SQL Injection Vulnerability (CNVD-2020-38218)

rConfig is an open source network configuration management utility . A SQL injection vulnerability exists in rConfig 3.9.4 and earlier versions, which stems from the program storing node passwords in plaintext. An attacker can exploit this vulnerability to access a listened network device...

CVE-2020-10547

rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices...

GESTI?NINTEGRAL ONLINE GESIO ERP SQL Injection Vulnerability

GESTI?NINTEGRAL ONLINE GESIO ERP is a suite of online ERP Enterprise Resource Planning management software from GESTI?NINTEGRAL ONLINE, Spain. The program supports billing, inventory management and business management. A SQL injection vulnerability exists in php files in GESTI?NINTEGRAL ONLINE...

SQL Injection Vulnerability in ZrLog

ZrLog is a blogging program developed using Java. ZrLog suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Multiple Versions of Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. SQL injection vulnerability exists in several versions of imcat. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Mcms of Jingdezhen Mingfei Technology Co.

Mcms is a J2EE system. Jingdezhen Mingfei Technology Co., Ltd Mcms has a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-33102)

Extreme CMS is an enterprise-level open source content building system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Markpoint's Construction Engineering Quality Inspection System

Construction engineering quality testing system is a set of national standards to achieve the evaluation of the physical properties of building materials, and to achieve self-help commissioning, registration of samples, automatic collection and calculation, automatic generation of reports, query...

Cisco Prime Collaboration Provisioning SQL Injection Vulnerability (CNVD-2020-29595)

Cisco Prime Collaboration Provisioning PCP is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. Cisco Prime Collaboration Provisioning suffe...

SQL injection vulnerability exists in kkcms (CNVD-2020-33123)

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information database...

Shijiazhuang Zhenhong Network Technology Co., Ltd. Shop7z online shopping system flagship version of the existence of SQL injection vulnerabilities

Shop7z online shopping system is ASP online store platform software, providing application services based on Internet solutions. Shijiazhuang City Zhenghong Network Technology Co., Ltd Shop7z online shopping system flagship version of the SQL injection vulnerability, attackers can exploit the...

SQL Injection Vulnerability in Health Collection and Reporting System of Shanxi Xianqi Technology Co.

The health collection and reporting system is developed by PHP+mysql and the code is completely open source for secondary development. Shanxi Xianqi Technology Co., Ltd. health collection and reporting system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL injection vulnerability in the kg***_dr***.php page of Stone Technology's online examination system (CNVD-2020-32528)

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores. A...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-30167)

Extreme CMS is an open source and free PHPCMS web content management system. Extreme CMS is an open source free PHPCMS website content management system, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in the Payment Platform of Harbin Xinzhongxin Electronics Co.

Harbin Xinzhongxin Electronic Co., Ltd. is a payment platform solution provider. A SQL injection vulnerability exists in the payment platform of Harbin Xinzhongxin Electronics Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in LaySNS of Wuhan Classen Technology Co.

Laysns using Think + Layui as the technical basis for development, using the OOP approach to the basic operation of the framework to build, modular development approach to do for the form of functional development. Wuhan class Sen Technology Co., Ltd. LaySNS SQL injection vulnerability, attackers...

SQL Injection Vulnerability in 120 Emergency Command Center Web Service System (CNVD-2020-31608)

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the 120 Emergency Command Center Web Service System, which can be exploite...