CVE-2021-26830

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...

CVE-2021-26830

The CVE-2021-26830 issue affects Tribalsystems Zenario CMS 8.8.52729, where a SQL Injection vulnerability exists in the Pugin library - delete path, via the ID input in ajax.php. The root cause is lack of input sanitization on the ID parameter, allowing remote attackers to access the database or ...

PT-2021-17154

Name of the Vulnerable Software and Affected Versions: Tribalsystems Zenario CMS versions prior to 8.8.52729 Description: The issue allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of "ajax.php" in the Pugin library - delete module...

CVE-2021-26830: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...

Zenario CMS SQL注入漏洞

Zenario CMS is a Zenario open source application . Provides a web-based content management system. A security vulnerability exists in Zenario CMS 8.8.52729 SQL Injection, which allows remote attackers to exploit the vulnerability to access the database or remove plugins...

Zenario CMS SQL注入漏洞

Zenario CMS is a Zenario open source application . Provides a Web-based content management system. A security vulnerability exists in Zenario CMS v8.8.52729, which originates from adminboxes.ajax.php, and allows remote attackers to create a new HTML component by injecting SQL commands in the "cID...

WordPress Sprymedia DataTables SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.Sprymedia DataTables is a JavaScript library for converting HTML tables to dynamic tables from the UK company...

Eaton Intelligent Power Manager SQL注入漏洞

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An SQL injection vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69, which is...

Sql injection

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=getwdtable&tableid=1, on the 'length' HTTP POST parameter...

Sql injection

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=getwdtable&tableid=1, on the 'start' HTTP POST parameter. Th...

SQL Injection Vulnerability in Student Achievement Query System of Hebei Xinkao Education Technology Co.

Hebei Xinkao Education Technology Co., Ltd. was registered on December 8, 2008 in Hengshui City Administration for Industry and Commerce. Legal representative Cui Junru, the company's scope of business includes education informatization new technology research and development; software developmen...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29211)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29209)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29216)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29212)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29126)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29215)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28464)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

Huaxia ERP suffers from SQL injection vulnerability (CNVD-2021-28482)

Huaxia ERP based on SpringBoot framework and SaaS model , to provide open source ERP software for small and medium-sized enterprises , currently focusing on sales and marketing inventory + financial + production functions . Huaxia ERP has a SQL injection vulnerability, which can be exploited by...

SQL Injection Vulnerability in Enterprise Magic Box

Enterprise WeChat Magic Box is an Enterprise WeChat SCRM, Enterprise WeChat third-party platform source code system, through her you can quickly deploy your own enterprise WeChat management system, enterprise WeChat SCRM system, session archive source code system. Enterprise WeChat Magic Box has ...