SQL Injection Vulnerability in the Backend of Essence CMS (CNVD-2019-14594)

JX CMS Jxcms is a website construction and management system independently developed by Taizhou JX Information Technology Co. A SQL injection vulnerability exists in the background of Jxcms. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in the Operation and Management Side of Housing Sentinel Real Estate System

Housing Sentinel Real Estate System has multiple systems for new homes, used homes, rentals, neighborhoods, Q&A and more. A SQL injection vulnerability exists in the operation and management side of the Housing Sentinel Real Estate System. Attackers can use this vulnerability to obtain sensitive...

CVE-2017-16558

Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module...

CVE-2019-11469

Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subsequently, an unauthenticated user can gain the authority of SYSTEM on the server by uploading a malicious file via the "Execute Program Actions" feature...

SQL Injection Vulnerability in Super Cms Backend

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

Joomla PhotoMapGallery SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in Joomla PhotoMapGallery. Due to the program failing to adequately filter user-supplied data before being used in SQL queries. Allows an attacker to corrupt the application, access or modify data, or...

IBM BigFix WebUI Software Distribution and IBM BigFix WebUI Profile Management SQL Injection Vulnerabilities

IBM BigFix WebUI Software Distribution and IBM BigFix WebUI Profile Management are both products of IBM Corporation of the U.S.A. IBM BigFix WebUI Software Distribution is a software distribution application.IBM BigFix WebUI Profile Management is a configuration management application. IBM BigFix...

SQL Injection Vulnerability in the Website Building System of Shanghai Wuwu Laike Technology Co.(CNVD-2019-12786)

Shanghai Wuwu Laike Technology Co., Ltd. is an enterprise dedicated to Internet and mobile Internet services. There is a SQL injection vulnerability in the website building system of Shanghai Wuwu Laike Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from t...

Joomla ChronoConnectivity2 Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla ChronoConnectivity2 component. Due to failure to adequately come over user-supplied data before using it in a SQL query. Allows an attacker to compromise the application, access or modify...

Joomla Sobi2 SobiPro Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Sobi2 SobiPro component. An attacker can exploit the vulnerability to obtain sensitive database information...

Discuz Forum System MagaCMS Online Newspaper Reader Plugin has SQL Injection Vulnerability

Discuz! is an online forum system. A SQL injection vulnerability exists in the MagaCMS Online Newspaper Reader plugin for Discuz forum system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in pr***.asp Page of E-Long Technology Website Builder System

Ningbo Yilong Olive Tree Computer Technology Co., Ltd. is a design and construction company specializing in corporate website platforms, government schools, home services and other industries. There is a SQL injection vulnerability in the pr.asp page of the website builder system of E-Dragon...

UBUNTU-CVE-2019-10232

Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlocktasks.php...

SQL Injection Vulnerability in Xinhuooa System

Xinhuo Co-operation Office System is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhuo OA system, attackers can use the vulnerability to obtain sensitive information in the database...

CVE-2019-6491

RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection...

CVE-2018-19510

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header...

CVE-2018-18798

Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view...

SQL Injection Vulnerability in Website Building System of Guangzhou Ju Teng Information Technology Co.

Guangzhou Ju Teng Information Technology Co., Ltd. specializes in website planning, production, promotion and network system development. Guangzhou Ju Teng Information Technology Co., Ltd. station building system there are SQL injection vulnerabilities, the attacker to take advantage of the...

SQL Injection Vulnerability in Qi Chen Technology Company's Website Building System (CNVD-2019-10433)

KiChen Technology Company Website Building System is an enterprise website building system developed by KiChen Technology Company. KiChen Technology's website builder system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the...

PHPSHE SQL Injection Vulnerability (CNVD-2019-12691)

Lingbao Jane Hao Network Technology PHPSHE is an online shopping mall system of China Lingbao Jane Hao Network Technology Company. The system supports express tracking, online chat, order evaluation and statistics and other functions. A SQL injection vulnerability exists in the...