10211 matches found
CVE-2018-10256
A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query...
Mitel MiVoice Connect SQL Injection Vulnerability
Mitel MiVoice Connect R1707-PREM and Mitel ST are both products of Mitel Corporation of Canada.Mitel MiVoice Connect R1707-PREM is a Unified Communications Management Appliance.ST is a videoconferencing product.conferencing is one of the notification components. conferencing is one of the...
Chemical website supported by HuaxiaChemNet suffers from SQL injection vulnerability.
Huaxia chemical network is by Shanghai Danfan network technology limited company founded, is for the chemical industry to provide security, high efficiency, multi-function, system supporting B2B electronic commerce platform of professional website. The chemical website supported by HuaxiaChemNet...
Kliqqi CMS SQL Injection Vulnerability
Kliqqi CMS is a content management system CMS. A SQL injection vulnerability exists in Kliqqi CMS version 3.5.2. A remote attacker can exploit the vulnerability to view data in the database with the help of the 'randkey' parameter with the value AND SELECT FROM SELECTSLEEP5MBMY to potentially gai...
Nagios XI core config manager authentication bypass vulnerability
Nagios XI is an IT infrastructure monitoring solution from Nagios, Inc. that supports monitoring and alerting of applications, services, operating systems, etc. core config manager is one of the core configuration managers. The solution supports monitoring and alerting of applications, services,...
SQL Injection Vulnerability in Enterprise Website Building System of Zaozhuang Frontier Technology Co.
Zaozhuang Frontier Technology Co., Ltd. is engaged in software technology services. A SQL injection vulnerability exists in the enterprise website building system of Zaozhuang Frontier Technology Co. An attacker can exploit the vulnerability to obtain sensitive database information...
UBUNTU-CVE-2017-9839
Dolibarr ERP/CRM is affected by SQL injection in versions before 5.0.4 via product/stats/card.php type parameter...
Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-08348)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM 7.0.0...
Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-08337)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM...
Multiple vulnerabilities in Cybozu Garoon
Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. SQL injection in the application "Address" CWE-89 - CVE-2018-0530 Operation restriction bypass in the "Folder settings" CWE-264 - CVE-2018-0531 Operation restriction bypass in the setting of Login...
Multiple SQL Injection Vulnerabilities in GxlcmsQY System
GxlcmsQY system is a simple program tailored for business users. GxlcmsQY System has multiple SQL injection vulnerabilities. An attacker can exploit the vulnerabilities to obtain sensitive database information...
Web Security Dog (IIS Version) V4.0 suffers from SQL Injection Vulnerability
Website Security Dog IIS Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features for comprehensive website security. Website Security Dog IIS Edition V4.0 suffers from a SQL injection vulnerability. An...
PT-2018-18966 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: zzcms version 8.2 Description: The issue allows SQL injection via the id parameter in a "dl/dl sendsms.php" request. Recommendations: For zzcms version 8.2, avoid using the id parameter in the "dl/dl sendsms.php" request until the issue is...
CVE-2018-8967
An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in an adv2.php?action=modify request...
NiuShop B2C Single Merchant Mall System suffers from SQL Injection Vulnerability
NiuShop B2C single merchant mall system is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2C single merchant mall system SQl injection vulnerability, attackers can use the vulnerability to obtain sensitive...
SQL Injection Vulnerability in ZZCMS /admin/logincheck.php File
Webmaster Merchants Content Management System ZZCMS developed by the ZZCMS team, into the database optimization, content caching, AJAX and other technologies, open source, independent functional modules, to facilitate secondary development. ZZCMS /admin/logincheck.php file SQL injection...
SQL Injection Vulnerability in the Website Building System of Tai'an Star Network Technology Co.
Tai'an Star Networks Co., Ltd. is a website construction, website promotion, Internet marketing, 400 free phone calls and other businesses, with Internet technology as the core of the high-tech enterprises. Taian Star Network Technology Co., Ltd. station building system there are SQL injection...
SQL Injection Vulnerability in Website Building System of Tian Xun Network Technology Co.
Tianxun Network Technology Co., Ltd. is a professional enterprise engaged in Internet services, focusing on corporate website planning and construction, WeChat public platform development, website optimization, online store decoration, online store operation, promotion account hosting services...