PbootCMS Enterprise Web Development and Construction Management System suffers from SQL Injection Vulnerability

PbootCMS is a new core permanent open source free PHP web development and building management system CMS developed by Avantech. PbootCMS enterprise website development and construction management system has a SQL injection vulnerability that can be exploited by remote attackers to submit special...

CVE-2020-9521

An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation SMA, affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being...

SQL Injection Vulnerability in PHPSHE

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE has a SQL injection vulnerability, which ca...

CVE-2019-20574

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the Wi-Fi history Content Provider. The Samsung ID is SVE-2019-14061 August 2019...

SQL Injection Vulnerability in Jinwei Supermarket Cashiering

Jinwei supermarket cash register designed for small and medium-sized supermarkets and community convenience stores to scan the code cash register tools, merchants can use an ordinary computer with Internet access with the code scanning gun to achieve the main functions of the supermarket cash...

DEBIAN-CVE-2020-10802

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

SQL injection vulnerability in the al***.cl***.php file of the UQCMS cloud commerce system

UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system al.cl.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

PT-2020-10037 · Cloud Native Computing Foundation +1 · Harbor +1

Name of the Vulnerable Software and Affected Versions: Cloud Native Computing Foundation Harbor versions prior to 1.8.6 and 1.9.3 Description: The issue allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform. This is a result of a flaw in the Cloud...

ShopsN open source mall system SQL injection vulnerability

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd. an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system . ShopsN open source mall system SQL injection vulnerability , attackers can us...

SQL injection vulnerability in the pa*** parameter of the ru***.php page of the website building system of Huaihua Fifth Element Network Information Company Limited (CNVD-2020-26552)

Huaihua Fifth Element Network Information Co., Ltd. is an Internet + application services company, Internet technology, marketing, operations, big data analysis, cloud computing applications as the core, to carry out the Internet + industrial integration operation and development. Huaihua Fifth...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2020-18399)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM...

UBUNTU-CVE-2020-10380

RMySQL through 0.10.19 allows SQL Injection...

Joomla! component com_newsfeeds 'feedid' SQL injection vulnerability

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in the Joomla! component comnewsfeeds 'feedid'. An attacker can exploit this vulnerability to execute illegal SQL commands...

SQL Injection Vulnerability in Microcontrol Smart Cafeteria Management System of Shenzhen Microcontrol One Finger Technology Co.

Shenzhen Micro-control One Finger Technology is a value-integrated enterprise that aspires to biometrics technology research as well as applied product development, production, consulting, sales and service. Shenzhen Micro-control One Finger Technology Co., Ltd Micro-control Smart Cafeteria...

SQL Injection Vulnerability in Guangzhou Sanjin Network Technology Co.

Guangzhou Sanjin Network Technology Co., Ltd. company is a high-tech technology enterprises in Guangdong Province was founded in May 2014, is the enterprise WeChat distribution platform, website construction service providers. Guangzhou Sanjin Network Technology Co., Ltd. website building system...

Shanghai Yiso Network Technology Co., Ltd. ShopsN open source mall system v3.0.0 aj*** function there are SQL injection vulnerabilities

ShopsN open source mall system is a product of Shanghai Yisu Network Technology Co. Ltd. ShopsN open source mall system v3.0.0 aj function there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in XYCMS

XYCMS is an enterprise building system developed with asp+access. XYCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in the Website Building System of Beijing Beyond Limits Information Technology Co.

Beijing Beyond Infinity Information Technology Co., Ltd. is mainly engaged in computer information system professional and technical services, including software application system development, technical consulting, technical training, services and other related businesses and product sales. Ther...

SQL Injection Vulnerability in Joyplus CMS ad***_ap***.php File

Joyplus CMS Joy Video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . Joyplus CMS adap.php file has a SQL injection...

SQL injection vulnerability in EjuCMS Us***.php file (CNVD-2020-23628)

EjuCMS is a localized O2O real estate website platform system. A SQL injection vulnerability exists in the EjuCMS Us.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...