ZZCMS SQL Injection Vulnerability (CNVD-2018-15848)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in line 5 of the zt/top.php file in ZZCMS 8.3 and earlier versions. A remote attacker can exploit this vulnerability by running ZZCMS in nginx to execute arbitrary SQL...

Countly - Cross-Site Scripting

Exploit Title: Countly-server StoredPersistent XSS Vulnerability Date: Monday - 2018 13 August Author: 10:10AM Team Discovered By: Sleepy Software Link: https://github.com/Countly/countly-server Version: All Version Category: Web-apps Security Risk: Critical Tested on: GNU/Linux Ubuntu 16.04 - wi...

SQL Injection Vulnerability in Emlsoft

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in Emlsoft v5.4.5, which stems from a failure to filter item parameters, and can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Taizhou Advertising Website System

Taizhou Advertising Network is a company that provides users with stable and efficient application services in the field of Internet as well as wireless communication. A SQL injection vulnerability exists in the Taizhou Advertising Network website builder system. An attacker can exploit the...

CVE-2018-11511

The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'albumid' or 'scope' parameter via a photo-gallery/api/album/treelists/ URI...

ShopsN open source online store full web system suffers from SQL injection vulnerability (CNVD-2018-17332)

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN v2.3.3 official version of the existen...

SQL Injection Vulnerability in Website Development System of Transparent Web Information Development Co.

eTranslate Web Information Development Ltd. is a company that provides system development and design, website visual design, internet marketing and web hosting services to its clients. ET Net Information Development Co., Ltd. website builder system there are SQL injection vulnerabilities, attacke...

PbootCMS V1.1.8-20180807 SQL Injection Vulnerability in Frontend

PbootCMS is an open source PHP enterprise web development and construction management system. PbootCMS V1.1.8-20180807 SQL injection vulnerability exists in the front-end , the vulnerability stems from the front-end does not limit the input information , the attacker can use the vulnerability to...

EMLsoft SQL Injection Vulnerability

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in the upload\eml\action\action.user.php file in EMLsoft version 5.4.5. A remote attacker can exploit this vulnerability to view, add, modify or delete information in the back-end database with the help ...

CVE-2018-14961

dl/dlsendmail.php in zzcms 8.3 has SQL Injection via the sql parameter...

ShopsN open source online store full system AdController file there are SQL injection vulnerabilities

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN 2.3.3 official version of the...

PbootCMS V1.1.7 SQL Injection Vulnerability in Co***.php Page

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Co.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Huayue Ares Enterprise Management Consultant Co.

Hua Yue Ares Enterprise Management Consultant Limited is a company that provides information computerization and integration services for small and medium-sized enterprises. A SQL injection vulnerability exists in the website builder system of Hua Yue Ares Enterprise Management Consultant Limited...

SQL Injection Vulnerability in Website Building System of Foshan Shunde District Outlook Software Design Co.

Foshan City, Shunde District, out of the frame software design limited company's main business is website production, software development, print advertising. There is a SQL injection vulnerability in the website building system of Foshan Shunde Outlook Software Design Co. Attackers can use the...

SQL injection vulnerability in le***.php page of Guowei CMS School Group System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. A SQL injection vulnerability exists in the le.php page of the State Micro CMS school station system. Attackers can use the vulnerability to...

SQL injection vulnerability in sh***.asp page of website building system of Wuxi Yi Shang Technology Co.

Wuxi Yi Shang Technology Co., Ltd. is a network planning and marketing enterprise. There is a SQL injection vulnerability in the sh.asp page of the website building system of Wuxi Yi Shang Technology Co. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Website Building System of Haikou ECCOM Sky Information Technology Co.

hereinafter referred to as "ECCOM Sky" is a collection of website construction, website planning, website optimization, search engine optimization and a variety of office software development, program development in one of the network information technology services company. There is a SQL...

SQL Injection Vulnerability in Interview Module of State Micro CMS School Crowd System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system interview module SQL injection vulnerability. Attackers can use the vulnerability to obtain...

CVE-2018-14501

manager/adminajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "mid=1 AND SLEEP5" substring...

SQL Injection Vulnerability in V1.7 Backend of School Worry-free Enterprise Building System

School carefree enterprise website system Xiao5uCompany is a set of company and enterprise-oriented website building system. SQL injection vulnerability exists in the background of XiaowuCompany V1.7. An attacker can exploit the vulnerability to obtain sensitive information from the database...