CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

Shopizer Cross-Site Scripting Vulnerability

Shopizer is Shopizer team of a set of Java-based open source e-commerce solutions . A security vulnerability exists in Shopizer versions prior to 2.11.0. An attacker can exploit the vulnerability to inject a script and save it in the database to execute the script...

Information disclosure

In Shopizer before version 2.11.0, a script can be injected in various forms and saved in the database, then executed when information is fetched from backend. This has been patched in version 2.11.0...

SQL Injection Vulnerability in Hongyu Multi-User Mall System

Ltd. is an information technology service-oriented, based on the forefront of high-tech fields, specializing in network Web development and application of high-tech enterprises. There is a SQL injection vulnerability in Hongyu Multi-User Mall System, which can be exploited by attackers to obtain...

Extreme CMS suffers from SQL injection vulnerability

Extreme CMS is an enterprise-level open source content building system. Extreme CMS has a SQL injection vulnerability , attackers can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in 4-in-1 Enterprise Website Management System

Four-in-one enterprise website management system is a computer website + mobile website + WeChat public number + small program in one of the content management system. A SQL injection vulnerability exists in the Four-in-One Enterprise Website Management System, which can be exploited by attackers...

SQL Injection Vulnerability in New Commercial Housing Online Signing and Filing Management System sh***_im***.aspx Page

The online contract filing management system for newly-built commercial properties provides business management functions such as commercial property pre-sale license application, approval, commercial property booking, pre-sale, contract signing and online contract filing. SQL injection...

SQL Injection Vulnerability in Waychar Enrollment System aj***.php Page mo*** Parameters

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar enrollment system aj.php page mo parameters exist SQL injection vulnerability, an attacker can use this vulnerability to obtain sensitive information in the database...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2020-28108)

Waychar Registration System is an online registration system developed for sports events and other general events, supporting public numbers and small programs. Waychar Registration System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Smart Electricity Cloud Platform of Ankre Electric Co.

Anchorui Electric Co., Ltd Smart Electricity Cloud Platform is a set of electrical fire early warning and prevention management system developed for the frequent occurrence of electrical fires. There is a SQL injection vulnerability in Ankre Electric Co., Ltd.'s Intelligent Electricity Cloud...

Nanhao Online Marking System SQL Injection Vulnerability

Nanhao online marking system is an online marking system developed by Hebei Nanhao High-tech Development Co. Nanhao online marking system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in ne***_sh***.php page of website building system of Chaozhou Weipai Network Technology Co.

Chaozhou Weipai Network Technology Co., Ltd Weipai Technology by a group of strong technical research and development, innovative spirit of design professionals and active marketing planning team, team members love the network, able to grasp the international mainstream design styles and innovati...

SQL Injection Vulnerability in Jinwei Smart Restaurant (CNVD-2020-31418)

Jinwei Smart Restaurant is a free restaurant management software. It is suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, western food, hot pot restaurant and other kinds of catering business. Jinwei Intelligent Restaurant has a SQL injection vulnerability...

SQL Injection Vulnerability in Heybbs Micro Community ad***.php File

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. A SQL injection vulnerability exists in the Heybbs Micro Community ad.php file. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in ERS Authorized Access System

Authorized access system IRAS Information Remote Access System system is launched by Infosys, is the realization of the architecture in the interconnection of the Internet based on the public data sharing services, the system uses JAVA2.0 technology, Eclipse as the development platform, JAVA as t...

Heybbs Micro Community lo***.php file has SQL injection vulnerability

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. There is a SQL injection vulnerability in the Heybbs micro community lo.php file. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in the ne***.php page of Huaxia Chemical website builder system (CNVD-2020-31519)

Huaxia chemical network is by Shanghai Danfan network technology limited company founded, is for the chemical industry to provide security, high efficiency, multi-function, system supporting B2B electronic commerce platform of professional website. Huaxia Chemical website building system ne.php...

SemCms suffers from SQL injection vulnerability (CNVD-2020-26981)

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS has SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in ti*** Parameters of the New Questionnaire Module of 120 Emergency Command Center Web Service System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. The 120 Emergency Command Center Web Service System has a SQL injection vulnerability in the ti parameter of the n...

SQL Injection Vulnerability in the New Member Module mo**** Parameters of 120 Emergency Command Center Web Service System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the mo parameter of the new membership module of the 120 Emergency Command...