CVE-2019-14348

The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsportseason/new-yorkers/?action=playerlist sid parameter...

SQL Injection Vulnerability in the Frontend of Far Autumn Medical Training Enrollment System v1.0

Far Autumn Medical Online Examination System adopts the universal test bank management software, applicable to all levels and types of medical schools and hospitals, the content contains the three basic exams for medical and nursing personnel, title exams, licensing exams, academic exams, trainin...

cPanel SQL Injection Vulnerability (CNVD-2019-26351)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A SQL injection vulnerability exists in bin/hordeupdateusernames in cPanel versions prior to 11.54.0.4. The vulnerability stems...

PT-2019-13736 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 5.0.2 Description: The issue allows SQL Injection in the interface/forms/eye mag/save.php file. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...

WordPress Advanced CF7 DB SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Advanced CF7 DB is a contact form plugin used in it. A SQL injection vulnerability exists in WordPress Vsourz Digital Advanced CF7 DB...

PT-2019-13431 · Vsourz Digital · Vsourz Digital Advanced Cf7 Db Plugin

Name of the Vulnerable Software and Affected Versions: Vsourz Digital Advanced CF7 DB plugin versions prior to 1.6.2 Description: A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system. Recommendations: For Vsourz Digital Advanced CF7 DB...

CVE-2019-1010148

zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...

CVE-2019-14231

An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.2 for WordPress. One could exploit the points parameter in the obgetresults ajax nopriv handler due to there being no sanitization prior to use in a SQL query in getResultByPointsTrivia. This allows an...

VANOC Enterprise Website Management System PHP v3.0 suffers from SQL injection vulnerability.

Vanno enterprise website management system PHP version is a php+MySQL development of php enterprise website management system. Vanno Enterprise Website Management System PHP version v3.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database...

CVE-2019-13569

A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

PT-2019-13434 · Wpeverest +1 · Everest Forms +1

Name of the Vulnerable Software and Affected Versions: WPEverest Everest Forms plugin for WordPress versions through 1.4.9 Description: A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system via includes/evf-entry-functions.php. This coul...

SQL Injection Vulnerability in Trust Call OA System (CNVD-2019-23863)

Xinhuo Co-operation Office System is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhao OA system, which can be exploited by attackers to obtain sensitive information from the database...

D-Link Central WiFi Manager (CWM-100) SQL Injection Vulnerability

D-Link Central WiFi Manager CWM-100 is a Web-based wireless access point management tool. A SQL injection vulnerability exists in the index.php/Pay/passcodeAuth passcode parameter in PayAction.class.php in versions prior to D-Link Central WiFi Manager CWM-100 1.03R0100BETA6. An attacker can explo...

SQL Injection Vulnerability in the Website Building System of Beijing Transcend Infinite Information Technology Co.

Beijing Beyond Infinity Information Technology is a company engaged in website construction. A SQL injection vulnerability exists in the website building system of Beijing Beyond Unlimited Information Technology Co. Attackers can utilize the vulnerability to obtain sensitive information of the...

SQL Injection Vulnerability in Lecast Platform of Shanda Luneng Information Technology Co.

Shanda Luneng Information Technology Co., Ltd. is committed to providing system solutions in the fields of education informatization, water informatization and automation, and environmental protection informatization. A SQL injection vulnerability exists in the LeCast platform of Shanda Luneng...

SQL Injection Vulnerability in Appointment Registration System of Nanjing Medical Health Information Technology Co.

Ltd. is a high-tech growing enterprise in China Nanjing Software Valley. A SQL injection vulnerability exists in the Appointment Registration System of Nanjing Medical Healthcare Information Technology Co...

SQL injection vulnerability in VANOC enterprise website management system (PHP version) version 3.0 cm***.php file

Vanno enterprise website management system PHP is based on php + MySQL development of enterprise website management system. Support IIS/Apache/Nginx, PHP5.2, PHP5.3, PHP5.4, MySQL5. VANOC enterprise website management system PHP version version 3.0 cm.php file SQL injection vulnerability, attacke...

SQL Injection Vulnerability in Website Building System of Shenyang Rande Technology Co.

Shenyang LAND Technology Co., Ltd. specializes in website construction and collaborative office software development. There is a SQL injection vulnerability in the sh.php file of the website building system of Shenyang LAND Technology Co. Attackers can utilize the vulnerability to obtain sensitiv...

Synology Photo Station SQL Injection Vulnerability (CNVD-2017-27712)

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology Inc. of Taiwan, China. A SQL injection vulnerability exists in the synophotocsPhotoDB.php file in Synology Photo Station versions prior to 6.8.11-3489 and prior to 6.3-2977. The vulnerabili...

CVE-2019-13024

Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands by using the value "initscript"-"Monitoring Engine Binary" in main.get.php to insert a arbitrary command into the database, and execute it by calling the...