SQL Injection Vulnerability in Panmicro oa e-cology8 ad*** Component

Panmicro collaborative management application platform e-cology is a set of collaborative business platform. A SQL injection vulnerability exists in the Panmicro oa e-cology8 ad component, which can be exploited by an attacker to obtain sensitive information from a database...

S-CMS School Building System v1.0 SQL Injection Vulnerability in Background aj*** U_*** Parameter

S-CMS is a content management system CMS based on PHP and MySQL. S-CMS School Building System v1.0 has a SQL injection vulnerability in the background aj U parameter, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in seacms backend (CNVD-2019-40978)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2019-16997

In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/languagegeneral.class.php via the admin/?n=language&c=languagegeneral&a=doExportPack appno parameter...

ShopsN open source mall system ad**_sy**_sa** function SQL injection vulnerability

ShopsN free version of B2C e-commerce is a product of Shanghai Yisu Network Technology Co. ShopsN open source mall system adsysa function SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in MetInfo sa***.php Page

MetInfo is an enterprise website management system with PHP+Mysql architecture. A SQL injection vulnerability exists in the MetInfo sa.php page, which can be exploited by attackers to obtain sensitive information from the database...

WordPress Post Indexer plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress Post Indexer plugin versions prior to 3.0.6.2. The...

SQL Injection Vulnerability in in***.php of Chengdu Timeshift Technology Co.

Chengdu Times Huichuang Technology Co., Ltd. is an information technology service-oriented enterprise integrating Internet software research and development, website operation, e-commerce and IT services. The standard website in.php of Chengdu Timeshift Technology Co., Ltd. has a SQL injection...

SQL injection vulnerability in the online petition system ws***.ashx page of Jiangsu Chuhuai Software Technology Development Co.

Jiangsu Chuhuai Software Technology Development Co., Ltd. to develop software products, products covering the National People's Congress, the Chinese People's Political Consultative Conference, the Discipline Inspection Commission, organization, letters and visits, meteorology, agriculture, food...

S-CMS government website builder system aj***.php page suffers from SQL injection vulnerability

S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a special government station building solutions to provide products. S-CMS government website building system aj.php page SQL injection vulnerability, attackers can use the vulnerability to obtain...

CVE-2019-16125

In Jobberbase 2.0, the parameter category is not sanitized in public/pagesubscribe.php, leading to /subscribe SQL injection...

PT-2019-14523 · 10Web · 10Web Photo Gallery

Name of the Vulnerable Software and Affected Versions: 10Web Photo Gallery plugin versions prior to 1.5.35 Description: A SQL injection issue exists in the photo-gallery plugin for WordPress. The issue is exploitable via the album id parameter in the admin/controllers/Albumsgalleries.php file...

SQL Injection Vulnerability in *z.asp System of Guilin Fate Network Technology Co.

Ltd. is committed to the low-end market, serving small and medium-sized enterprise customers as well as individuals, and doing a good job with every website. There is a SQL injection vulnerability in z.asp, which can be exploited by attackers to obtain database information...

CVE-2019-13191

A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search/Refine/Set page...

SQL Injection Vulnerability in YzmCMS Backend da***.cl***.php

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS backend da.cl.php has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the...

SQL Injection Vulnerability in YouDianCMS Frontend Cu***.cl***.php File

YouDianCMS is an enterprise website management system developed by Changsha YouDian Software Technology Co. A SQL injection vulnerability exists in the Cu.cl.php file in the frontend of YouDianCMS. An attacker can use the vulnerability to obtain sensitive information from the database...

Gesior-AAC SQL Injection Vulnerability

Gesior-AAC is an official tibia.com layout created based on cipsoft. A SQL injection vulnerability exists in the shop.php file in versions of Gesior-AAC prior to 2019-05-01. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An...

WordPress buddyforms plugin SQL injection vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress buddyforms plugin versions prior to 2.2.8, which can be exploited by...

SQL Injection Vulnerability in zzzphp sm***.php Page

zzphp is a free website builder developed in PHP language. A SQL injection vulnerability exists in the zzzphp sm.php page, which can be exploited by attackers to obtain sensitive information from the database...

WordPress search-everything plugin SQL injection vulnerability (CNVD-2019-30597)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. search-everything is a search function plugin used in it. WordPress search-everything plugin has a SQL injection vulnerability. An...