CVE-2021-37614

In Progress MOVEit Transfer, a SQL injection vulnerability exists in the MOVEit Transfer web application for certain versions prior to 2021.0.3 (13.0.3). An authenticated remote attacker could potentially access the backend database, with the impact depending on the database engine (MySQL, Micros...

PEEL Shopping SQL Injection Vulnerability (CNVD-2021-61762)

PEEL Shopping is a PHP/MySQL architecture of open source e-commerce system. 9.4.0.1 prior version of PEEL Shopping has a SQL injection vulnerability, which can be exploited by attackers to inject malicious SQL queries and obtain sensitive database information...

CVE-2021-37593

CVE-2021-37593 affects PEEL Shopping. Public/unauthenticated users can perform remote SQL injection, potentially reading and modifying database data. The vulnerability is reported against PEEL Shopping version 9.4.0 (and prior versions in some sources). Root cause: insecure handling of SQL querie...

CVE-2021-25201

CVE-2021-25201 corresponds to an SQL injection vulnerability in Learning Management System v1.0 where the id parameter is exploited to execute arbitrary SQL and potentially expose sensitive database information. Multiple connected sources corroborate the issue and its impact; no details on affect...

CVE-2021-2336

The CVE-2021-2336 entry discusses a vulnerability in Oracle Database Server, specifically the Enterprise Edition Data Redaction component, affecting 12.1.0.2, 12.2.0.1, and 19c. The issue allows a low-privileged attacker with Create Session privilege and network access via Oracle Net to compromis...

CVE-2021-32743

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions prior to 2.11.10 and from version 2.12.0 through version 2.12.4, some of the Icinga 2 features that require credentials for extern...

SQL Injection Vulnerability in Hubei Dapeng Network Technology Co.

Hubei Dapeng Network Technology Co., Ltd. is a network technology company mainly focusing on website construction, network promotion, 400 telephone, public number development, small program construction, WeChat marketing, software system, network engineering and so on. Hubei Roc Network Technolog...

SQL Injection Vulnerability in Zhejiang Dingcheng Network Co.

Zhejiang Dingcheng Network Co., Ltd. is a company with experience in Internet marketing services, the main products are responsive website construction, marketing website construction, website SEO optimization and other Internet marketing basic services. Zhejiang Dingcheng Network Co., Ltd. websi...

Crab poend blog program has SQL injection vulnerability

Crab poend blog program is a blogging system. Crab poend blog program suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Sql injection

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 201164...

Sql injection

A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information...

SQL Injection Vulnerability in LinkWorks GroupWorks Platform

Based on the construction industry, Quanta Technology Co., Ltd. provides customers with digital hardware and software products, solutions and related services around the whole life cycle of engineering projects. A SQL injection vulnerability exists in LinkWorks collaborative work platform, which...

SQL Injection Vulnerability in Ai Qing Lemon CMS (CNVD-2021-51250)

Aizumi CMS is a php music website developed with php MySQL. Aizumi CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Top 8 Database Security Best Practices

There is a large body of knowledge on what activities are required in order to secure databases and in order to comply with regulations and requirements. We’ve gathered the top 8 best practices for ensuring database security. Databases are arguably the most important and, unfortunately, also the...

SQL Injection Vulnerability in the ERP System of Chengdu Pan-Pro Software Development Co.

Chengdu Pan-Pro Software Development Co., Ltd, business scope contains material management system, construction cost management software, contract management system, project progress management system and so on. The ERP system of Chengdu Pan-Pro Software Development Co., Ltd. suffers from a SQL...

Why You’re Not Making the Leap from Compliance to a Database Security Strategy

Gartner strongly recommends that the concept of “big data strategy” should be replaced with “making big data part of our everyday strategy.” Technology has created a database activity explosion for most enterprises and made traditional agent-based data logging, monitoring, and auditing far too...

Sql injection

IBM Datacap Taskmaster Capture IBM Datacap Navigator 9.1.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191045...

Shenzhen HeWeiShun Network Technology Co., Ltd. IP-COM in-depth Internet behavior management there are information leakage vulnerabilities

Shenzhen HeWeiShun Network Technology Co., Ltd. business scope includes network products, communication products, computer software and hardware, integrated circuit technology development, etc.. Shenzhen HeWeiShun Network Technology Co., Ltd. IP-COM in-depth Internet behavior management informati...

SQL Injection Vulnerability in Hybrid Alarm Receiver at Honeywell (China) Co.

Ltd. is part of Honeywell International, a diversified, high-tech advanced manufacturing company with a turnover of $38 billion. A SQL injection vulnerability exists in the Honeywell China Limited Hybrid Answering Machine, which can be exploited by an attacker to obtain sensitive information from...

CVE-2020-22168

CVE-2020-22168 concerns the PHPGurukul Hospital Management System v4.0, where a SQL injection exists in the file hms/change-emaild.php. The vulnerability allows remote, unauthenticated attackers to extract sensitive data from the database. Several connected sources corroborate the existence of a ...