Cross site scripting

yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contains a Cross Site Scripting XSS vulnerability in sidebar and table data that can result in Database fields aren't properly sanitized and allow code injection Cross-Site Scripting. This attack appears to be exploitable via the payload needs ...

SQL injection vulnerability in ne***.asp page of website building system of Guangzhou Shuntian Computer Technology Co.

Guangzhou Shuntian Computer Technology Co., Ltd. is a domestic senior network technology service providers, with the international leading website development technology, e-commerce technology, a full range of web site promotion technology and attentive after-sales customer service team. Guangzho...

PHPwind Backend SQL Injection Vulnerability

PHPWind is a set of PHP-based Web forum program . A SQL injection vulnerability exists in the PHPwind backend. An attacker can exploit the vulnerability to execute SQL statements...

SQL injection vulnerability in zzzphp V1.6.0 backend sa***.php page

zzphp is a free website building system developed using PHP. zzzphp V1.6.0 SQL injection vulnerability exists in the background sa.php page, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Zhongshan Shangyou Network Technology Co.

Zhongshan Shangyou Network Technology Co., Ltd. is a company dedicated to Internet branding and Internet marketing. There is a SQL injection vulnerability in the website building system of Zhongshan Shangyou Network Technology Co., Ltd, which can be exploited by attackers to obtain sensitive...

CVE-2019-5893

Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter...

SQL Injection Vulnerability in SchoolCMS v2.3.1 Us***.class File

SchoolCMS is a school teaching management system based on PHP+MySQL. A SQL injection vulnerability exists in the SchoolCMS v2.3.1Us.class file, which can be exploited by attackers to obtain sensitive information...

SQL injection vulnerability in Zoneminder ev***.php file

Zoneminder is an open source video surveillance system. A SQL injection vulnerability exists in the Zoneminder ev.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

inxedu SQL Injection Vulnerability

inxedu is a set of open source online education platform of China's inxedu technology company. The platform includes an online school system, a live broadcasting system, an examination system, a community system and a marketing website. SQL injection vulnerability exists in inxedu 2018-12-24 and...

SugarCRM (portal_get_related_notes) SQL Injection Vulnerability

SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. A SQL injection...

CVE-2019-3577

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id0 parameter to the /product URI...

CVE-2019-3576

inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATHINFO. The vulnerable code location is com.inxedu.os.edu.controller.user.UserControllerdeleteFavorite aka deleteFavorite in...

Ivan Cordoba Generic Content Management System SQL Injection Vulnerability

Ivan Cordoba Generic Content Management System CMS is a content management system CMS based on MySQL and PHP. A SQL injection vulnerability in the Administrator/index.php file in Ivan Cordoba Generic CMS 2018-04-28 and earlier versions can be exploited by remote attackers to bypass authentication...

CVE-2018-20568

Administrator/index.php in Ivan Cordoba Generic Content Management System CMS through 2018-04-28 allows SQL injection for authentication bypass...

SQL Injection Vulnerability in the Frontend Bi***.ashx Page of eDoc, an Electronic Document Repository

Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic Document Library eDoc front Bi.ashx page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

SQL Injection Vulnerability in PHPMyWind mem***_up***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind memup.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

phpipam SQL injection vulnerability (CNVD-2019-43861)

phpIPAM is a set of open source PHP and MySQL based IP address management application IPAM. A SQL injection vulnerability exists in the /app/admin/nat/item-add-submit.php file in PHPipam version 1.3.2. An attacker can exploit this vulnerability to obtain information...

Chamilo LMS SQL Injection Vulnerability (CNVD-2018-26466)

Chamilo LMS is an open source online learning and collaboration system developed by the Chamilo Association. The system supports the creation of instructional content, distance training and online question and answer sessions. A SQL injection vulnerability exists in the...

CVE-2018-20338

Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...

SQL injection vulnerability in the front-end me***/fo***.php page of S-CMS hospital website builder system

S-CMS hospital station building system is developed by asp+access/mssql, easy to operate, convenient, support PC+mobile+WeChat. There is a SQL injection vulnerability in the front-end me/fo.php page of S-CMS Hospital Building System. Attackers can use the vulnerability to obtain sensitive...