SQL Injection Vulnerability in Ke361 Frontend

Ke361 is an open source Taobao system. Ke361 frontend has a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in E-Trend Intelligent eHR Management Platform (CNVD-2021-24430)

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. E-Trend Intelligent eHR Management Platform has SQL injection vulnerabilities, which ca...

SQL Injection Vulnerability in E-Trend Intelligent eHR Management Platform (CNVD-2021-24435)

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. E-Trend Intelligent eHR Management Platform has SQL injection vulnerabilities, which ca...

Cross-Site Scripting in Content Preview

It has been discovered that database fields used as descriptionColumn are vulnerable to cross-site scripting when their content gets previewed in the page module. A valid backend user account is needed to exploit this vulnerability...

CVE-2020-24791

FUEL CMS 1.4.8 allows SQL injection via the 'fuelreplaceid' parameter in pages/replace/1. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

CVE-2020-24791

FUEL CMS 1.4.8 contains a SQL injection in the fuel_replace_id parameter of pages/replace/1. The root cause is an injection vector that allows an attacker to read/modify data and potentially exploit underlying database vulnerabilities. Impact is described as compromising the application and data ...

IBM DB2安全漏洞

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 has a security vulnerability that can be exploited by an attacker to trigger a denial of servi...

SQL Injection Vulnerability in JPress

JPress is a product developed using Java, similar to WordPress. JPress suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in DEDECMS (CNVD-2021-19724)

DEDECMS is a universal tool that allows you to comprehensively manage various sections on your website. DEDECMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Wando Technology's Website Building System

Wando Technology is an information technology company dedicated to enterprise informationization application services, and is an application service provider for enterprises to provide Internet-based business solutions. A SQL injection vulnerability exists in Wando Technology's website builder...

Code injection

An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code...

SQL Injection Vulnerability in Water Rights Trading System (CNVD-2021-18285)

Tangshan Liulin Automation Equipment Co., Ltd. is a high-tech enterprise specializing in the research and development, production, sales and system engineering technical services of Internet of Things security communication terminal and intelligent application platform software. There is a SQL...

SQL Injection Vulnerability in Qibo Cloud Micro Distribution

Micro-distribution is a "micro-mall + micro-distribution" social e-commerce marketing platform, based on the spread of the WeChat circle of friends, easily lead thousands of WeChat users together for you to sell goods, sales of goods. Qibo cloud micro distribution SQL injection vulnerability...

SAP HANA Database Signature Validation Improperity Vulnerability

SAP HANA is a set of high-performance real-time data analytics platform from Germany's SAP, which supports users to query and analyze real-time business data. An improper signature validation vulnerability exists in SAP HANA Database versions 1.0 and 2.0. The vulnerability stems from the program...

SQL Injection Vulnerability in Purple File Management System

hereinafter referred to as "Violet Software" is a provider of industry solutions and IT services. A SQL injection vulnerability exists in the Zilight File Management System. An attacker could exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in LUCA OA (Government Edition)

LUCA OA system adopts three-tier structure mode, system development adopts java technology, and the database supports Mysql, SQL Server, Oracle and so on. SQL injection vulnerability exists in LUCA OA Government Edition, which can be exploited by attackers to obtain sensitive information from the...

Shanghai Yijue Network Technology Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2021-16460)

The business scope of Shanghai Yijue Network Technology Co., Ltd. includes technical development, technology transfer, technical consultation, technical services in the field of network technology, computer technology, information technology, computer network engineering and so on. Shanghai Yijue...

SQL Injection Vulnerability in Putonghua Intelligent Evaluation and Learning System of KU Xunfei Co.

Ltd. is a company specializing in intelligent speech and language technology research, software and chip product development, voice information service and e-government system integration. A SQL injection vulnerability exists in the Mandarin Intelligent Evaluation and Learning System of KU Xunfei...

SQL Injection Vulnerability in CRM E4/Standard Edition of Pengwei Software Co.

Pengwei Software Co., Ltd. is a static transportation system solution provider. A SQL injection vulnerability exists in the CRM E4/Standard Edition of Pengwei Software Corporation, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in eq***.asp page of website building system of Ningbo Yilong Computer Technology Co.

Ningbo YiLong Computer Technology Co., Ltd. is a design and build enterprise focusing on enterprise website platform, government school, home service and other industries. Ltd. website building system eq.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...