CVE-2018-19349

In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...

CVE-2018-19331

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

CVE-2018-18755

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update usergroupid parameter or the admin/user/user/update userid parameter...

CVE-2018-0685

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search...

TouchNet universal mall station building system free version v20181107 foreground SQL injection vulnerability

TouchNet universal mall station-building system is a set of universal station-building system developed by Tianjin TouchNet Technology Co. TouchNet universal mall station building system free version v20181107 SQL injection vulnerability exists in the foreground, an attacker can use the...

DedeCMS SQL Injection Vulnerability (CNVD-2019-07021)

Desdev DedeCMS Dream Weaving Content Management System is China's Zhuozhuo network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. A SQL injection vulnerability exis...

WP GDPR Compliance <= 1.4.2 - Unauthenticated Call Any Action or Update Any Option

The plugin WP GDPR Compliance allows unauthenticated users to execute any action and to update any database value. If the request data form is available for unauthenticated users, even unauthenticated users are able to do this. See references for discussion of the issue. The problem is in the fil...

SQL Injection Vulnerability in OURPHP 1.8.3

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OURPHP1.8.3 version of the SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

CVE-2018-18949

Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...

PhpTpoint Hospital Management System SQL Injection Vulnerability (CNVD-2019-23086)

PhpTpoint Hospital Management System is a hospital management system developed using PHP language. The system includes functions such as doctor management, patient management and online appointment booking. A SQL injection vulnerability exists in PhpTpoint Hospital Management System, which can be...

CVE-2016-10731

ProjectSend formerly cFTP r582 allows SQL injection via manage-files.php with the request parameter status, manage-files.php with the request parameter files, clients.php with the request parameter selectedclients, clients.php with the request parameter status, process-zip-download.php with the...

PHPSHE B2C Mall System V1.7 SQL Injection Vulnerability in Background

PHPSHE B2C mall system is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. PHPSHE B2C Mall System V1.7 has a SQL injection vulnerability in the background. An attacker can exploit the vulnerability to obtain sensitive database...

SQL Injection Vulnerability in the Website Publishing Cloud Platform of Beijing Kai Pu Internet Technology Co.

Ltd. is a provider of content management cloud computing solutions and services. A SQL injection vulnerability exists in the website publishing cloud platform of Beijing Kai Pu Internet Technology Co. An attacker can exploit the vulnerability to obtain sensitive information from the database...

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

SQL Injection Vulnerability in V1***.php file of YunYu CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. There is a SQL injection vulnerability in the file V1.php of YUNUCMS enterprise website management system. An attacker can exploit the...

Gxlcms SQL Injection Vulnerability (CNVD-2018-21608)

Gxlcms is an enterprise website creation system. A SQL injection vulnerability exists in the \lib\admin\action\dataaction.class.php file in Gxlcms version 2.0. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the 'ids' parameter...

foreman: SQL injection due to improper handling of the widget id parameter

An input sanitization flaw was found in the id field of the dashboard controller. A user could use this flaw to perform a SQL injection attack on the back-end database...

SQL injection vulnerability in ShopsN open source online store full web system (CNVD-2018-22115)

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN open source online store system has a...

S-CMS School Building System SQL Injection Vulnerability in Frontend

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the frontend of the S-CMS school website builder system. Attackers can use the vulnerability t...

SQL Injection Vulnerability in Dreamline Enterprise Website Building System

Dream line business enterprise station building system is to use PHP + MySQL way to run the open source station building system. Dreamline enterprise website builder system SQL injection vulnerability, attackers can use the vulnerability to modify the administrator account password...