SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-02215)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-02207)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SQL Injection Vulnerability in Super CMS Content Management System Backend

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-00775)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-01257)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

TYPO3 SQL Injection Vulnerability (CNVD-2019-47027)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A SQL injection vulnerability exists in Typo3 versions 4.5.0 through 4.5.5. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

SQL Injection Vulnerability in Kaixin Helpdesk System PC***_ad***.aspx

The Kairos Helpdesk System is a system for dealing with day-to-day issues. A SQL injection vulnerability exists in the Qixing Helpdesk System PCad.aspx, which can be exploited by attackers to obtain sensitive information...

DEBIAN-CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

Cisco DNA Spaces:Connector SQL Injection Vulnerability

Cisco DNA Spaces is a set of indoor location services platform from Cisco.Cisco DNA Spaces:Connector is one of the connectors used to support the communication of Cisco wireless controllers. A SQL injection vulnerability exists in the Web UI in versions prior to Cisco DNA Spaces: Connector 2.0 th...

SQL Injection Vulnerability in Yunye CMS in***.php Page

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the CMS in.php page, which can be exploited by attackers to obtain sensitive information...

newbee-mall SQL Injection Vulnerability

newbee-mall is an e-commerce system. A SQL injection vulnerability exists in the main/resources/mapper/NewBeeMallGoodsMapper.xml file in versions of newbee-mall prior to 2019-10-23, which stems from a lack of validation of externally entered SQL statements in database-based applications and can b...

SQL injection vulnerability in pi***.php page of website building system of Hebei Chenguang Network Technology Co.

Hebei Chenguang Network Technology Co., Ltd. is subordinate to Hebei Chenguang Holding Group, founded in 2005, is a high-tech enterprise dedicated to providing informationization construction for various enterprises and government agencies. Hebei Chenguang Network Technology Co., Ltd. building...

CVE-2019-3661

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads...

SQL Injection Vulnerability in SeaCMS Backend (CNVD-2019-45360)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a SQL injection vulnerability in the background of SeaCMS, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in SeaCMS Backend (CNVD-2019-45355)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a SQL injection vulnerability in the background of SeaCMS, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in SeaCMS Backend (CNVD-2019-45196)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a SQL injection vulnerability in the background of SeaCMS, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in LebiShop (Multi-language Online Shopping Mall System)

Lebi multilingual online shopping mall system LebiShop, free , full open source , support for secondary development . NET 4.5 C language development , using SQL Server and MySQL database . LebiShop has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

SQL injection vulnerability in in***.php file of Laikai e-commerce system (CNVD-2020-00182)

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system in.php file contains a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Yunye CMS Frontend

Yunye cms enterprise building system is developed by php + mysql a set of open source cms dedicated to small and medium-sized enterprise website construction. Yunye CMS front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Xingyunhai CMS Frontend

Xingyunhai CMS is a completely open source CMS content management system. Xingyunhai CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...