WSTMall open source mall system LogLoginsAction.class.php exists SQL injection vulnerability

WSTMall is a multi-commercial O2O open source system developed by Merchant Software based on thinkphp, a system that can help businesses and individuals to quickly build a community service system. WSTMall open source mall system LogLoginsAction.class.php has a SQL injection vulnerability due to...

iWebShop open source mall system comment.php check parameter has SQL injection vulnerability

iWebShop is an open source WEB e-commerce B2B2C platform self-supporting + merchants stationed station-building system based on PHP language + MYSQL database development, using the MVC architecture Yii framework thinking design pattern carefully designed a product. iWebShop open source mall syste...

Trend Micro Control Manager cmdHandlerTVCSCommander.dll File SQL Injection Vulnerability

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. A SQL injection vulnerability exists in TMCM version 6.0, which stems from the cmdHandlerTVCSCommander.dll file failing to adequately validate user input. A remote...

SOL.Connect ISET-mpp meter SQL Injection Vulnerability

The Popendorf Software Engineering SOL.Connect ISET-mpp meter is a photovoltaic plant data acquisition meter from Popendorf Software Engineering, Germany. A SQL injection vulnerability exists in the SOL.Connect ISET-mpp meter. This vulnerability can be exploited by remote attackers to execute...

IDERA Uptime Monitor SQL Injection Vulnerability

IDERA Uptime Monitor is a cross-platform server monitoring software from IDERA. The software provides a server performance, availability and other indicators to collect, summarize and generate reports and other functions. An SQL injection vulnerability exists in the...

SQL injection vulnerability in products.php page cid parameter of Shenzhou Tongda website builder system

ShenZhouTongDa network building system is a website building system. A SQL injection vulnerability exists in the cid parameter on the products.php page of the website builder system. An attacker can exploit this vulnerability to obtain sensitive database information...

IBOS Enterprise Collaboration Management software count actionRecall function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionRecall function of IBOS Enterprise Collaboration Management Software. Allow attackers to exploit the vulnerability to obtain database sensiti...

Niushop open source mall system has multiple SQL injection vulnerabilities

NiuShop open source mall system , is by the Shanxi Niu Cool Information Technology Co., Ltd. completely independent design , research and development of a PHP open source e-commerce system . NiuShop open source mall system collectionGoodsOrShopt, cancelCollGoodsOrShop, platformAdvList,...

SQL Injection Vulnerability in finecms Frontend num Parameter

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A SQL injection vulnerability exists in the frontend num parameter of finecms. An attacker can exploit this vulnerability to obtain database information...

FineCms SQL Injection Vulnerability (CNVD-2017-18530)

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A SQL injection vulnerability exists in FineCms version 5.0.9. A remote attacker can inject arbitrary SQL commands with the help of the 'field' parameter in an action=module, action=member,...

FineCms SQL Injection Vulnerability (CNVD-2017-18532)

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A SQL injection vulnerability exists in FineCms version 5.0.9. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

CVE-2017-3221

Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords...

Atutor SQL Injection Vulnerability (CNVD-2017-24615)

ATutor is an open source Web-based learning content management system LCMS developed by the ATutor team. The system includes teaching content management, forums, chat rooms and other modules. Atutor SQL Injection Vulnerability. Allows attackers to exploit vulnerabilities to access or modify data,...

CVE-2017-11417

Fiyo CMS 2.0.7 has SQL injection in dapur/apps/apparticle/controller/articlestatus.php via $GET'id'...

CVE-2017-11354

Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/apparticle/sysarticle.php via the name parameter in editing or adding a tag name...

SQL Injection Vulnerability in the Website Building System of Shanghai Interesting Dazzle Networks

Shanghai Interesting Dazzle Networks' website building system is a website building system. A SQL injection vulnerability exists in the website builder system of Shanghai Fun Dazzle Network. An attacker can exploit the vulnerability to obtain database information...

Ke361 Taoist Mall system GoodsController.class.php parameter id has SQL injection vulnerability

Ke361 is an open source Taobao system. A SQL injection vulnerability exists in the GoodsController.class.php parameter id of the Ke361 Taobao Mall system. Attackers can use to change the vulnerability to obtain database information...

wstmall open source mall system endDate parameter SQL injection vulnerability

WSTMall is a multi-commercial O2O open source system developed by Merchant Software based on thinkphp, is a system that can help companies and individuals to quickly build a community service system. wstmall open source mall system endDate parameter SQL injection vulnerability , due to the system...

IdeaCMS microstore config_loader.asp has SQL injection vulnerability

IdeaCMS Micro Mall Management System is a PC+Mobile+WeChat integrated mall system developed by Sampi Network Technology Co. A SQL injection vulnerability exists in IdeaCMS Micro Mall configloader.asp. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in flagship version of modoer review system

Modoer is a local sharing, multi-functional review website management system. Developed and designed with PHP+MYSQL, open all source code.Modoer fully supports PC, cell phone, tablet; colleagues support microsoft integration, allowing the site to go deep into any place. Modoer review system...