WordPress appointment-booking-calendar plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. appointment-booking-calendar is an online appointment management plugin used in it. A SQL injection vulnerability exists in the...

CVE-2018-21003

The buddyforms plugin before 2.2.8 for WordPress has SQL injection...

S-CMS enterprise website building system backend C_da*** parameter exists SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Cda parameter in the background of S-CMS enterprise website building system. Attackers...

CVE-2019-15574

Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php...

Cybozu Garoon SQL Injection Vulnerability (CNVD-2019-29157)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A SQL injection vulnerability exists in Cybozu Garoon versions 4.0.0 through 4.10.3, which can be exploited by...

SemCMS foreign trade website backend has SQL injection vulnerability

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. semcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

S-CMS enterprise website builder system backend aj***.p*** C*** parameter has SQL injection vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS enterprise station building system background aj.p C parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

UBUNTU-CVE-2019-12385

An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches even guest users can dump any data contained in the database sessions, hashed passwords, etc.. This may lead to a full compromise of...

CVE-2017-18570

The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries...

CVE-2019-10687

KBPublisher 6.0.2.1 has SQL Injection via the admin/index.php?module=report entryid0 parameter, the admin/index.php?module=log id parameter, or an index.php?View=print&id= request...

WordPress easy-digital-downloads plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. easy-digital-downloads is an e-commerce plugin used in it. A SQL injection vulnerability exists in the WordPress easy-digital-download...

YouPHPTube SQL Injection Vulnerability (CNVD-2019-41830)

YouPHPTube is a PHP-based video website system. A SQL injection vulnerability exists in the userCreate.json.php file in YouPHPTube version 7.2. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications, which can be exploited by attacker...

SQL injection vulnerability in in***.php page of Hefei Seven Gang Network Technology Co.

Ltd. is mainly engaged in website construction product development and services. The in.php page of the Hefei Seven Help Network Technology Co., Ltd. website building system has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

CVE-2017-18514

The simple-login-log plugin before 1.1.2 for WordPress has SQL injection...

CVE-2019-13462

Lansweeper before 7.1.117.4 allows unauthenticated SQL injection...

Nextcloud Lookup-Server SQL Injection Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An SQL injection vulnerability exists in Nextcloud Lookup-Server, which can be exploited by an attacker to execute illegal SQL commands...

CVE-2019-14754

Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter...

Xionghai CMS v1.0 suffers from SQL Injection Vulnerability

XIONGHAI CMS is developed by XIONGHAI can be widely used in personal blogs, personal websites, corporate websites, a set of integrated website management system. Applicable to personal blogs, personal websites, corporate websites and other various purposes, the front end of the computer, mobile t...

MicroDigital N-series cameras SQL Injection Vulnerability

MicroDigital N-series cameras is an N-series network camera from MicroDigital Korea. A SQL injection vulnerability exists in MicroDigital N-series cameras. An attacker can exploit this vulnerability to execute illegal SQL commands...

ZZCMS system information module multiple parameters SQL injection vulnerability

ZZCMS is a product website that can be built quickly. A SQL injection vulnerability exists in several parameters of the information module of ZZCMS website builder, which can be exploited by attackers to obtain database information...