The Next Generation of Genealogy Sitebuilding SQL Injection Vulnerabilities

The Next Generation of Genealogy Sitebuilding TNG is genealogy software developed by Darrin Lythgoe for installation in web servers. A SQL injection vulnerability exists in the primaryID value of the timeline2.php file in versions prior to 11.1.1 of The Next Generation of Genealogy Sitebuilding,...

SQL injection vulnerability in the class2id parameter of the about.php page of the website building system of Kunming Senyu Technology Co.

Kunming Senyu Technology Co., Ltd. is a website building system. There is a SQL injection vulnerability in the class2id parameter on the about.php page of Kunming Senyu Technology Co. Attackers can use this vulnerability to obtain sensitive database information...

Yunnan Tianren Network Technology Co., Ltd. website building system pic.aspx page tpid parameters exist SQL injection vulnerability

Tianren Network Technology website building system is a website building system. There is a SQL injection vulnerability in the tpid parameter of the pic.aspx page of the website building system of Yunnan Tianren Network Technology Co. An attacker can use this vulnerability to obtain sensitive...

baserCMS SQL Injection Vulnerability

baserCMS is an enterprise-level content management system CMS. A SQL injection vulnerability exists in baserCMS versions 3.0.14 and earlier and 4.0.5 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands, create files, and obtain or change information in...

ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability . As the system fails to effectively filter the addrdel function. A remote attacker can exploit the vulnerability to obtain sensitive database...

ShopsN v3.0 SQL Injection Vulnerability in Frontend UserSetController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 front-end UserSetController.class.php file has a SQL injection vulnerability . As the system fails to effectively filter the addressajax function. A remote attacker can exploit the vulnerability to obtain sensitive database information...

NexusPHP staffbox.php File SQL Injection Vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending the 'setanswered' parameter to the staffbox.php file to...

SEO Panel SQL Injection Vulnerability

Seo Panel is a set of control panels for managing your website's search engine optimization, which provides features such as website rankings, Google, Baidu and other search engine indexing, Sitemaps auto-generator and keyword positioning check. A SQL injection vulnerability exists in versions of...

Multiple vulnerabilities in SEO Panel

Overview SEO Panel provided by SEO Panel contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-10838 SQL injection CWE-89 - CVE-2017-10839 ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...

SQL injection vulnerability in JYmusic UserController.class.php page s parameter

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the JYmusic UserController.class.php page s parameter. A remote attacker can exploit the vulnerability to obtain sensitive database information...

NexusPHP reports.php file SQL injection vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in the reports.php file in NexusPHP version 1.5. A remote attack can exploit this vulnerability to execute arbitrary SQL commands with the 'delreport'...

SQL Injection Vulnerability in Xiaowei OA v2.0

Xiaowei OA system is Beijing Xiaowei Help Technology Co., Ltd. to provide mobile office platform for small and medium-sized enterprises. SQL injection vulnerability exists in Xiaowei OA v2.0, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2017-12910

SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter...

Multiple Vulnerabilities in Duxcms Backend

DuxCms is a PHP development, based on HMVC rules for small and medium-sized enterprises, companies, news, personal and other related industries, website content management. Duxcms backend - form - guestbook cross-site scripting and SQL injection vulnerability. The vulnerability due to the system ...

SQL Injection Vulnerability in ourphp v1.7.3 ourphp_play.class.php Page

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. A SQL injection vulnerability exists in the ourphp v1.7.3 ourphpplay.class.php page. An attacker can exploit this vulnerability to obtain sensitive database informati...

IBOS Enterprise Collaboration Management Software NotifyController.php page actionDetail function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionDetail function on the NotifyController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the...

NiuShop_b2c_data_release has multiple vulnerabilities

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShopb2cdatarelease exists to bypass the payment vulnerability , file upload vulnerability , arbitrary...

WSTMall open source mall system LogLoginsAction.class.php exists SQL injection vulnerability

WSTMall is a multi-commercial O2O open source system developed by Merchant Software based on thinkphp, a system that can help businesses and individuals to quickly build a community service system. WSTMall open source mall system LogLoginsAction.class.php has a SQL injection vulnerability due to...

iWebShop open source mall system comment.php check parameter has SQL injection vulnerability

iWebShop is an open source WEB e-commerce B2B2C platform self-supporting + merchants stationed station-building system based on PHP language + MYSQL database development, using the MVC architecture Yii framework thinking design pattern carefully designed a product. iWebShop open source mall syste...

Trend Micro Control Manager cmdHandlerTVCSCommander.dll File SQL Injection Vulnerability

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. A SQL injection vulnerability exists in TMCM version 6.0, which stems from the cmdHandlerTVCSCommander.dll file failing to adequately validate user input. A remote...