CVE-2018-6229

A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system...

Afian FileRun SQL Injection Vulnerability (CNVD-2018-06552)

Afian FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A SQL injection vulnerability exists in Afian FileRun versions prior to 2018.02.13. A remote attacker can exploit the vulnerability to execute SQL commands with the help of...

Alexandria Book Library component SQL injection vulnerability in Joomla!

Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other features . Alexandria Book Library component is used in one of the data management components . A SQL injection vulnerability exists in...

YxtCMF SQL Injection Vulnerability

YxtCMF is an online learning system. The system has functions such as online live broadcast, online question and answer, teacher management and forum. A SQL injection vulnerability exists in the ShitiController.class.php file in YxtCMF version 3.1. A remote attacker can exploit this vulnerability...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

YXCMS has multiple vulnerabilities

Yxcms is an enterprise building system based on PHP and mysql technology. Yxcms 1.4.6 version exists stored XSS, arbitrary file deletion, file write, SQL injection vulnerability, attackers can exploit the vulnerability to obtain control of the web server...

SQL Injection Vulnerability in BEESCMS Frontend member.php and order_save.php Pages

BEESCMS is an enterprise website management system based on PHP+Mysql architecture. A SQL injection vulnerability exists in the BEESCMS frontend member.php and ordersave.php pages. An attacker can exploit the vulnerability to obtain sensitive database information...

Saxum Picker Component SQL Injection Vulnerability in Joomla!

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla! Saxum Picker component that allows remote attackers to submit a special SQL request to manipulate the database, which can be used to obtain sensitive information or execute arbitrary code...

Multiple SQL Injection Vulnerabilities in iZhanCMS v2.1 Backend

Love Station CMS is an open source and free CMS content management system. iZhanCMS v2.1 version of the background there are multiple SQL injection vulnerabilities, attackers can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in WODECMS Content Management System Version V1.1

WODECMS open source content management system formerly known as TCCMS is based on independent research and development of a PHP development framework for the development of content management system . WODECMS content management system version V1.1 news.class.php file there is a SQL injection...

Security Onion Solutions Squert SQL Injection Vulnerability

Security Onion Solutions Squert is a web application for querying and viewing event data stored in the Shuil database. A SQL injection vulnerability exists in the .inc/callback.php file in Security Onion Solutions Squert versions 1.1.1 through 1.6.7. The vulnerability can be exploited to execute...

PHP Scripts Mall Select Your College Script SQL Injection Vulnerability

PHP Scripts Mall Select Your College Script is a PHP based categorized search script for higher education institutions by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Select Your College Script version 2.0.2. A remote attacker can exploit this vulnerability to...

Cross-site Scripting and SQL Injection Vulnerabilities in YiiCMS

YiiCMS is a backend basic content management system written based on yii2. YiiCMS suffers from a cross-site scripting and SQL injection vulnerability, which is due to the system failing to effectively filter user input. An attacker can exploit this vulnerability to insert malicious cross-site cod...

CVE-2018-0205

A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by...

CVE-2018-7178

SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter...

CVE-2018-5989

SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099...

CVE-2018-5991

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798...

CVE-2018-5981

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

CVE-2017-15329

Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module. An attacker logs in to the system as a common user and sends crafted HTTP requests that contain malicious SQL statements to the affected system. Due to a lack of input validation on HTTP requests tha...

Website Security Dog suffers from SQL Injection Vulnerability

Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. Website Security Dog suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...