SQL Injection Vulnerability in 74cms Backend Pe***.cl***.php File

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background Pe.cl.php file SQL injection vulnerability. Attackers can use the...

Semcms asp version V4.6 suffers from SQL Injection Vulnerability

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. Semcms asp version V4.6 version exists SQL injection vulnerability . Attackers can use the vulnerability to obtain...

zzcms SQL Injection Vulnerability (CNVD-2019-13262)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the /user/jobmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to execute SQL commands with the help of the 'bigclass' parameter...

CVE-2018-17412

zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header...

Joomla Zoo by YooTheme Components SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in Joomla Zoo by YooTheme Components. An attacker can exploit this vulnerability to obtain sensitive database information...

CVE-2019-9184

SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the productoption parameter...

SQL Injection Vulnerability in Sc***.php Page of S-CMS Enterprise Website Builder System

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A SQL injection vulnerability exists in the Sc.php page of the S-CMS enterprise website builder system. An attacker can exploit the...

VulnCheck KEV: CVE-2018-10225

thinkphp 3.1.3 has SQL Injection via the index.php s parameter...

S-CMS Enterprise Website Builder System Po***.php page suffers from SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Po.php page of the S-CMS enterprise website builder system. Attackers can use the...

SQL injection vulnerability in the frontend p***_r***.asp file of the EcoTimes Enterprise Online Bookkeeping Management System

EcoTimes Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

SQL injection vulnerability in the front-end mo***_pa***_mo***.asp file of the Environmental Protection Era Enterprise Online Bookkeeping Management System.

EcoTime Enterprise Online Bookkeeping Management System" is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and accounts payable, as well as company's bookkeeping and other related financial...

SQL Injection Vulnerability in ad***.asp of Qixing Helpdesk System Backend

The Kairos Helpdesk System is a system for dealing with day-to-day issues. A SQL injection vulnerability exists in the backend ad.asp of Qixing Helpdesk System, which can be exploited by attackers to manipulate the database...

ZoneMinder SQL Injection Vulnerability (CNVD-2019-04687)

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. SQL injection vulnerability exists in the ajax/status.php file in versions prior to ZoneMinder 1.32.3, which can be exploited by remote attackers to execute SQL commands with...

DEBIAN-CVE-2019-8423

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...

SQL Injection Vulnerability in Sl***_Qu***.aspx of Bid 1.0 Backend of Qixing Engineering Bidding System

Qixing Bidding System is suitable for enterprises to collect information on government procurement, engineering construction, land grant and other bidding information, and to track the progress of works and payment of successful projects. A sql injection vulnerability exists in the back-end...

SQL Injection Vulnerability in Lotte Property Operations Management System

Lotte property management system is centered around four main lines of housing, owners, customer service and charges, which efficiently and intelligently realizes the process and standardized management, and greatly enhances the work efficiency of property personnel while improving the level of...

SQL Injection Vulnerability in the Frontend Pi***.aspx Page of eDoc, an Electronic Document Library

Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc foreground Pi.aspx page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in the Frontend Po***.aspx Page of eDoc Electronic Document Library

Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc foreground Po.aspx page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

UBUNTU-CVE-2019-7548

SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

CVE-2019-1000004

yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contains a Cross Site Scripting XSS vulnerability in sidebar and table data that can result in Database fields aren't properly sanitized and allow code injection Cross-Site Scripting. This attack appears to be exploitable via the payload needs ...