CVE-2021-20736

NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the database via unspecified vectors...

07FLY-CRM suffers from SQL injection vulnerability (CNVD-2021-47157)

07FLY-CRM is a domestic open source general-purpose customer management system . 07FLY-CRM has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

PHPGurukul Hospital Management System SQL注入漏洞

PHPGurukul Hospital Management System is a web application for hospitals to manage doctors and patients. A SQL injection vulnerability exists in \hms\getdoctor.php in PHPGurukul Hospital Management System version 4.0. An attacker can exploit this vulnerability to obtain sensitive information from...

Sql injection

Secure 8 Evalos does not validate user input data correctly, allowing a remote attacker to perform a Blind SQL Injection. An attacker could exploit this vulnerability in order to extract information of users and administrator accounts stored in the database...

The vulnerability of the IBM DB2 database management system lies in the insufficient cleaning of special elements in the output data used by the incoming component, which allows a hacker to trigger a service failure.

The vulnerability of the IBM DB2 database management system is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially created commands...

The vulnerability of the SSL protocol implementation in the IBM DB2 database management system allows a hacker to induce a service failure.

The vulnerability of the SSL protocol implementation in the IBM DB2 database management system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted requests...

The vulnerability of the IBM DB2 database management system, related to deficiencies in access control, allows a hacker to read and write arbitrary files.

The vulnerability of the IBM DB2 database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to read and write arbitrary files...

The vulnerability of the IBM DB2 database management system, related to deficiencies in access control, allows attackers to enhance their privileges.

The vulnerability of the IBM DB2 database management system is related to deficiencies in access control when using the SYSIBM schema. Exploiting this vulnerability can allow attackers to enhance their privileges through specially created commands...

The vulnerability of the IBM DB2 database management system lies in the lack of mechanisms to verify the size of copied data, which allows attackers to increase their privileges.

The vulnerability of the IBM DB2 database management system is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability can allow an attacker to enhance their privileges...

IBM DB2 注入漏洞

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in Db2 that originates from an abnormal termination of the server duri...

AppCMS SQL Injection Vulnerability

APPCMS is a professional APP content management system, APP application part needs to be used in combination with data center. A SQL injection vulnerability exists in /admin/downloadframe.php in AppCMS version 2.0.101. An attacker can exploit this vulnerability to obtain sensitive information fro...

SQL Injection Vulnerability in Clinical Browsing System of Bluebonnet Technology Co. Ltd (CNVD-2021-42812)

Bluebonnet Technology Co., Ltd. is a well-known medical information technology solution provider, focusing on the field of medical information technology, product development, sales and service as one of the national high-tech enterprises. A SQL injection vulnerability exists in the clinical...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Generation System (CNVD-2021-41720)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Tianrongxin Webpage Tampering Prevention System Management Center

Founded in 1995, Tianrongxin is a leading provider of network security, big data and cloud services in China. Business scope: technical services, technology development, technology consulting, technology exchange, technology transfer and technology promotion. There is a SQL injection vulnerabilit...

CVE-2021-20720

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors...

CVE-2021-20720

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors...

Sql injection

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors...

SQL Injection Vulnerability in SEMCMS Shop Backend (CNVD-2021-39125)

SEMCMS Shop is a self-developed open source online store btc system. SQL injection vulnerability exists in SEMCMS Shop backend. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Simple College Website

The Simple College Website project is a content management system with an online application specific to a particular school. A SQL injection vulnerability exists in Simple College Website, which can be exploited by an attacker to obtain sensitive information from a database...

SQL Injection Vulnerability in student-record-system-php

student-record-system-php is a student record system. A SQL injection vulnerability exists in student-record-system-php, which can be exploited by an attacker to obtain sensitive information from the database...