SQL Injection Vulnerability in iOffice.net Hospital Edition

The business scope of Guangzhou Hongfan Computer Technology Co., Ltd. includes: computer room maintenance services, information technology consulting services, data processing and storage services, digital animation production, software development and so on. SQL injection vulnerability exists in...

SQL Injection Vulnerability in Extreme CMS Frontend (CNVD-2021-10367)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Electronic Evidence Management Software of Shenzhen Police Wing Intelligent Technology Co. Ltd (CNVD-2021-10394)

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management software SQL injection vulnerability,...

SQL Injection Vulnerability in LJCMS (CNVD-2021-10525)

LJCMS is a free and open source content management system. LJCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about the database...

Design/Logic Flaw

HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions...

CVE-2021-22850

CVE-2021-22850 concerns the HGiga EIP product, where an ineffective access control on certain pages permits attackers to access databases and perform privileged functions. The issue is described consistently across sources, with NVD citing two CVSS measurements: CVSS v2.0 base score 7.5 (HIGH) an...

CVE-2021-22851

HGiga EIP product contains an SQL Injection vulnerability in the document management page where an attacker can inject SQL commands via a specific URL parameter to access database schema and data. The available sources describe the vulnerability type and impact but do not specify affected version...

SQL Injection Vulnerability in oasys (OA automated office system)

oasys OA automated office system is oriented to the daily operation and management of the organization, employees and managers use the application system to improve the efficiency of the company's office. A SQL injection vulnerability exists in oasys OA automated office system. An attacker can...

SQL Injection Vulnerability in Lebang Website Building System (CNVD-2021-13487)

Hangzhou Lebang Technology Co., Ltd. is an Internet digital service integration organization integrating website mobile platform construction, mobile application development, network marketing integration and operation outsourcing. A SQL injection vulnerability exists in the Hangzhou Lebang websi...

CVE-2021-23837

An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selectedfolder HTTP request body parameter for the acp interface. The affected parameter which retrieves the file contents of the specified folder was found to be accepting malicious...

SQL Injection Vulnerability in Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd (CNVD-2021-05890)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a domestic service provider of the whole tourism industry chain with a high market share. There is a SQL injection vulnerability in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd. that can...

CVE-2020-17136

creationtimestamp| type| source ---|---|--- 2021-01-11 22:23:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve202017136.rb 2024-10-09 20:01:43+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2490 2025-02-06...

Nantong Baidu's website builder system suffers from SQL injection vulnerability

The business scope of Nantong Shouping Information Technology Co., Ltd. includes: research and development and sales of computer software and hardware; Internet technology services, etc. There is a SQL injection vulnerability in the website building system of Nantong Baidu Company, which can be...

CVE-2020-27285

Crimson 3.1 (Builds before 3119.001) is affected by CVE-2020-27285 due to Missing Authentication for Critical Function, enabling a user to read/modify the database without authentication. The issue is tied to the default configuration and affects the protocol converter component; Red Lion notes u...

CVE-2020-23250

GigaVUE-OS (GVOS) versions 5.4–5.9 are affected by a vulnerability stemming from the use of a weak hashing algorithm for data stored in the internal database. Root cause: weak hash algorithm. Documented impact is low (CVSS v3.1: 2.3) with local access required and no user interaction. No exploit ...

SQL Injection Vulnerability in Tengzhi Yunmao Store Management System

Tengzhi cloud trade through the store management system for fasteners, electromechanical tools, hardware industry store purchasing, warehousing, processing, sales, finance, statistics for the core business management module, to achieve comprehensive control of the store. Tengzhi cloud trade store...

SQL Injection Vulnerability in Lightbox Cloud Platform Pro

The Lightbox Cloud Platform Pro is an intelligent cloud server management system. Ltd. Lightboat Cloud Platform Pro has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in the System of Guangdong Dabit Information and Advertising Development Co.

Guangdong Big Bit Information and Advertising Development Co., Ltd. referred to as Big Bit big-bit, was established in 1999, to information dissemination as the main business, created to serve the electronics manufacturing industry as the main information platform. There is a SQL injection...

SQL Injection Vulnerability in CSC VIPExam Exam Study Resources Database

Zhongke VIPExam Exam Learning Resources Database is a set of educational resources database integrating the functions of daily study, review and preparation for exams, online paperless exams and so on. A SQL injection vulnerability exists in the ZK VIPExam Exam Learning Resources Database. An...

SQL Injection Vulnerability in Environmental Automatic Monitoring System of Jiangsu Sanxi Technology Co.

The business scope of Jiangsu Sanxi Technology Co., Ltd. includes: environmental monitoring and control systems, automation systems, information management systems, computers, communications, control systems, and other types of systems such as software and hardware development. Jiangsu Sanxi...