SQL Injection Vulnerability in phpaaCMS v0.5 admin/friendlink.add.php Page

phpaaCMS is a simple article management system. A SQL injection vulnerability exists in the admin/friendlink.add.php page of phpaaCMS v0.5, which can be exploited by attackers to obtain sensitive information from the database...

Fastspot BigTree CMS SQL Injection Vulnerability (CNVD-2017-35446)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in the core/inc/auto-modules.php file in Fastspot BigTree CMS 4.2.19 and earlier versions. A remote attacker can exploit the...

CVE-2017-16955

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...

CVE-2017-8198

FusionSphere V100R006C00SPC102NFV has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL...

SQL injection vulnerability in program\form\receive\data_add.php page of Dreamline Monxin enterprise station builder system

Monxin Enterprise Station Building System is a self-service station building system based on PHP language development. A SQL injection vulnerability exists in the program\form\receive\dataadd.php page of the Monxin Enterprise Station Building System. The vulnerability is due to the system failing...

DEBIAN-CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

EasySNS Minimalist Community groupinfo method, commentadd_callback method suffer from SQL injection vulnerability

EasySNS Minimalist Community is for the new database architecture and program structure, to the group as the basic unit to form an interactive community. A SQL injection vulnerability exists in the groupinfo and commentaddcallback methods of EasySNS Minimalist Community. The vulnerability is due ...

SQL Injection Vulnerability in ShowNews.asp Page of Zhongkai Information Website Building System

Zhongkai Information Network Co., Ltd. is to provide a full range of one-stop e-commerce solutions for traditional and emerging enterprises. A SQL injection vulnerability exists in the ShowNews.asp page of CKI's website builder system. The vulnerability is caused due to the system's failure to...

SQL Injection Vulnerability in E-Tech Website Construction System of Yanji Pilot High-Tech Development Co.

Yanji Pioneer Hi-Tech Development Co., Ltd. is a modernized company of computer software, hardware development and network service, electronic technology application and development. Now it has developed "E-technology website construction software", "E-technology e-commerce", "E-technology office...

SQL injection vulnerability in EML enterprise address book management system action.address.php file

EML enterprise customer relationship management system is based on Linux open kernel and Apache based Php + Mysql intelligent B / S interactive service system. A SQL injection vulnerability exists in the EML Enterprise Contacts Management System action.address.php file. An attacker can exploit th...

VIM SQL Injection Vulnerability

VIM is an open source, configurable text editor for creating and changing any type of text, which can be used on most UNIX systems and Apple OS X. It can be used on most UNIX systems. A SQL injection vulnerability exists in VIM. A remote attacker can exploit this vulnerability by sending the...

SQL Injection Vulnerability in category.php of Ubiquitous 365 Website Category Navigation System

Uc365 website classification and navigation system is a cross-platform open source software , based on PHP + MYSQL development and construction of open source website classification and catalog management system . Uke365 website category navigation system category.php SQL injection vulnerability...

Dynamic News Magazine&Blog CMS SQL Injection Vulnerability

Dynamic News Magazine&Blog CMS is a content management system mainly used for information websites. A SQL injection vulnerability exists in Dynamic News Magazine&Blog CMS version 1.0. A remote attacker can inject SQL commands by sending the 'id' parameter to the admin/adminprocess.php file...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-35598)

ZOHO ManageEngine Applications Manager is a set of IT operations management solutions from ZOHO. A SQL injection vulnerability exists in Zoho ManageEngine Applications Manager version 13. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the 'name' paramete...

EyesOfNetwork web interface 'host' parameter SQL injection vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. The EyesOfNetwork web interface aka eonweb is one of these web interfaces...

Xavier PHP Management Panel SQL Injection Vulnerability

Xavier PHP Management Panel is a PHP-based web content protection script. A SQL injection vulnerability exists in Xavier PHP Management Panel version 2.4. A remote attacker can inject malicious SQL commands into the admin/adminuseredit.php file by sending the 'usertoedit' parameter or the...

Multiple vulnerabilities in IdeaCMS v2.1.0 plug/user/index.asp page

IdeaCMS website management system is by the three skin network technology limited company the original day side of the network based on the Asp + Access/Mssql environment to develop a rapid station-building system. IdeaCMS v2.1.0 plug/user/index.asp page parallel override, logical design and SQL...

Responsive Newspaper Magazine&Blog CMS SQL Injection Vulnerability

Responsive Newspaper Magazine&Blog CMS is a content management system mainly used for information websites. A SQL injection vulnerability exists in Responsive Newspaper Magazine&Blog CMS version 1.0. A remote attacker can inject SQL commands by sending the 'id' parameter to the...

HPE ArcSight ESM and ArcSight ESM Express SQL Injection Vulnerability

HPE ArcSight ESM Enterprise Security Manager and ESM Express are both enterprise security management software with event correlation and security analysis capabilities from Hewlett Packard Enterprise HPE. The software collects, correlates and reports on enterprise-wide security events in real tim...

Article Directory Script SQL Injection Vulnerability

Article Directory Script is a script for creating article directories in websites. A SQL injection vulnerability exists in Article Directory Script version 3.0. A remote attacker can exploit this vulnerability by sending the 'id' parameter to the author.php or category.php file to inject SQL...