CVE-2020-22784

Affected software : Etherpad UeberDB (pre-0.4.4). Root cause : MySQL omits trailing spaces on CHAR/VARCHAR during comparisons, allowing bypass of key-name access controls via the MySQL connector. Impact : Bypassing access controls for key names in database records. Status : Exploitation details n...

CVE-2021-29442

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly...

Oracle Linux 8 : mariadb:10.3 / and / mariadb-devel:10.3 (ELSA-2021-1242)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1242 advisory. galera 25.3.32-1 - Rebase to 25.3.32 mariadb 3:10.3.28-1 - Rebase to 10.3.28 Tenable has extracted the preceding description block directly from the Oracle Linu...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34300)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Youdot CMS System (CNVD-2021-32482)

Founded in 2012, Changsha Youdot Software Technology Co., Ltd. provides small and medium-sized enterprises SMEs with integrated solutions for website construction, new retail smart stores, micro-sites, micro-malls, live selling, and multi-end mini-programs. A SQL injection vulnerability exists in...

SQL Injection Vulnerability in Intelligent Safe Electricity Management Platform of Ankre Electric Co.

Founded in 2003, Anchorui Electric Co., Ltd. is a high-tech joint-stock enterprise integrating R&D, production, sales and service, providing energy efficiency management and electricity safety solutions for enterprise microgrids. A SQL injection vulnerability exists in the Intelligent Safe...

SQL Injection Vulnerability in AKCMS

AKCMS is the most famous lightweight CMS builder in China. AKCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2021-28242

SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cfname" parameter when creating a new filter under the "Collections" tab...

SQL Injection Vulnerability in the Website Building System of Shanghai Qiu Chuang Technology Co.

Ltd. was founded in 2001, specializing in providing e-commerce solutions and services for Chinese and foreign customers in various industries as well as Internet-based application services. A SQL injection vulnerability exists in the website building system of Shanghai Quchuang Technology Co., Lt...

No Auth, Seamless Database Security and Compliance

As data breaches continue to target databases and attack techniques become more sophisticated over time, organizations are looking for dynamic and efficient ways to effectively monitor the compliance posture of the databases in their hybrid environments. They have traditionally used privileged...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28833)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28832)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, attackers can use the...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28839)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

Huaxia ERP suffers from SQL injection vulnerability (CNVD-2021-28476)

Huaxia ERP based on SpringBoot framework and SaaS model , to provide open source ERP software for small and medium-sized enterprises , currently focusing on sales and marketing inventory + financial + production functions . Huaxia ERP has a SQL injection vulnerability, which can be exploited by...

CVE-2021-26919

CVE-2021-26919 affects Apache Druid, where allowing users with certain JDBC permissions to supply MySQL JDBC properties not on the allowed list could enable code execution in Druid server processes via a malicious MySQL server. Documented behavior: trusted users can set up lookups or ingestion ta...

SQL Injection Vulnerability in Huaxia ERP (CNVD-2021-27666)

Huaxia ERP based on SpringBoot framework and SaaS model , to provide open source ERP software for small and medium-sized enterprises , currently focusing on sales and marketing inventory + financial + production functions . Huaxia ERP has a SQL injection vulnerability, which can be exploited by...

SQL injection vulnerability in in***.php page of Harbin Qixun Technology Co.

Harbin Qixun Technology Co., Ltd. is an Internet enterprise specializing in small and medium-sized enterprise network marketing outsourcing. Harbin Qixun Technology Co., Ltd. building system in.php page there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitiv...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-24454)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in One Zero Technology's Website Building System

Zero-One Technology Ren is a business intelligence solutions provider that integrates consulting, professional services and product marketing. A SQL injection vulnerability exists in the website building system of ZeroOne Technology, which can be exploited by attackers to obtain sensitive...

SemCms SE***_Do***.php file suffers from SQL injection vulnerability (CNVD-2021-22608)

SemCms is an open source foreign trade enterprise website management system. SemCms SEDo.php file SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...