Xionghai CMS system delete2 parameter exists sql injection vulnerability

XIONGHAI CMS is developed by XIONGHAI can be widely used in personal blogs, personal websites, corporate websites, a set of integrated website management system. Applicable to personal blogs, personal websites, corporate websites and other various purposes, the front end of the computer, mobile t...

Schneider Electric U.motion Builder Remote Code Execution Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in Schneider Electric U.motion Builder. The underlying SQLite database query performs SQL injection on the username input parameter. A remote attacker can exploit the vulnerability t...

Xionghai CMS system id parameter exists sql injection vulnerability

XIONGHAI CMS is developed by XIONGHAI can be widely used in personal blogs, personal websites, corporate websites, a set of integrated website management system. XIONGHAI CMS system id parameters exist sql injection vulnerability, the vulnerability due to the failure of the id parameters for...

CVE-2017-9429

SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via the id parameter to wp-admin/admin.php...

CICMS V2.1 suffers from sql injection vulnerability

CICMS system is developed by php+mysql, based on CodeIgniter, and is mainly used for enterprise building. CICMS V2.1 suffers from a sql injection vulnerability. An attacker can exploit this vulnerability to obtain the server's password...

Ideacms suffers from SQL injection vulnerability

IdeaCMS website management system is by the three skin network technology limited company the original day side of the network based on the Asp + Access/Mssql environment to develop a rapid station-building system. Ideacms has a SQL injection vulnerability. Attackers can use the vulnerability to...

CVE-2016-2034

SQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6 and 6.6.0...

WSTMALL Mall System v1.9.2 RelateCommunityId and shopName Parameters Exist SQL Injection Vulnerabilities

WSTMall is a multi-commercial O2O open source system developed by Merchant Software based on thinkphp , is a system that can help businesses and individuals to quickly build a community service system . WSTMALL mall system version V1.9.2 relateCommunityId and shopName parameters there are SQL...

WebsiteBaker SQL Injection Vulnerability (CNVD-2017-08709)

WebsiteBaker is an open source PHP content management system CMS maintained and developed by the WebsiteBaker organization. The system supports WYSIWYG editor, search engine optimization and add-ons. A SQL injection vulnerability exists in the /account/details.php file in WebsiteBaker version...

Parameters in loginlog_2.php in Shield Spirit Public Number Promotion System v1.3 have sql injection vulnerabilities

Shield Spirit public number promotion system is mainly applied to public number promotion alliance, suitable for personal and business subscription number and service number or enterprise number. Shield Spirit public promotion system v1.3 in loginlog2.php parameters exist sql injection...

Piwigo Facetag SQL Injection Vulnerability

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. The Piwigo Facetag plugin suffers from a SQL injection vulnerability due to the program failing to properly filter...

SQL Injection Vulnerability in Public Consultation Module of SMiCMS Government Website System

SMi CMS Government Website System is a website system for governments, schools and groups. A SQL injection vulnerability exists in the Public Consultation module of SMiCMS Government website system, which can be exploited to execute arbitrary SQL commands and obtain sensitive database information...

SQL injection vulnerability in OA system welcomeShow.aspx page mode parameter of Guangzhou Hongfan Computer Technology Co.

Red sail iOffice system is a based on Microsoft .NET technology research and development, the establishment of notebook, cell phone and other convenient terminal as a carrier to realize the mobile information system. ioffice OA system involves hospitals, government, military industry, group...

SQL Injection Vulnerability in the ID Parameters of the Website Building System of Tianjin General Zhuoye Technology Co.

Tianjin General Zhuoye Technology Co., Ltd. station-building system is a station-building system that provides Tianjin website construction, Tianjin website promotion, network marketing integration services, website security solutions. There is a SQL injection vulnerability in the ID parameter of...

PowerSCADA Photovoltaic Power Generation Automation Monitoring System APP suffers from SQL Injection Vulnerability

PowerSCADA PV power generation automation monitoring system APP is a power monitoring system that realizes real-time monitoring of all aspects of power, viewing of historical data, and real-time response to alarm messages in mobile terminals. PowerSCADA PV automation monitoring system APP has SQL...

Avaya Radvision SCOPIA Desktop SQL Injection Vulnerability

Avaya Radvision SCOPIA Desktop is a high-definition desktop video software. Avaya Radvision SCOPIA Desktop suffers from a SQL injection vulnerability that originates from the program's failure to adequately validate user-supplied data prior to its utility in a SQL query. An attacker could use thi...

PT-2017-17973 · Dolibarr · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 4.0.4 Description: The issue is related to SQL Injection in the doli/theme/eldy/style.css.php file via the lang parameter. Recommendations: For version 4.0.4, avoid using the lang parameter in the affected file until...

flatCore SQL Injection Vulnerability (CNVD-2017-06456)

flatCore is a web content management system based on PHP5 and SQLite3. A SQL injection vulnerability exists in flatCore, which allows remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...

SQL injection vulnerability in ZZCMS jsout/hit.php file

ZZCMS is a PHP-written enterprise website builder. ZZCMS jsout/hit.php file SQL injection vulnerability, the vulnerability is caused by the failure to effectively filter the editor parameter due to the attacker to obtain sensitive database information...

Joomla Component JGrid SQL Injection Vulnerability

Joomla is the U.S. OpenSourceMatters team of a set of PHP and MySQL development using open source, cross-platform content management system CMS. Joomla Component JGrid V4.44 has a SQL injection vulnerability that can be exploited by an attacker to require any authentication and obtain sensitive...