Joomla! component com_jssupportticket SQL Injection Vulnerability

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component comjssupportticket. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in ThinkLC re***.php Page

ThinkLC is a local classification information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the ThinkLC re.php page, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Ma***.aspx Page of Eqin WEB Attendance Management Software

Easy Attendance WEB attendance management software is a network version of the B / S architecture WEB attendance management software. The Ma.aspx page of EaseUS WEB Attendance Management Software has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive informatio...

Zhengzhou Wolf Smoke Network Technology website construction system has SQL injection vulnerabilities

Zhengzhou Wolf Smoke Network Technology Limited a professional website design, production, operation service provider. Zhengzhou Wolf Smoke Network Technology website construction system has SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

Security Bulletin: Financial Transaction Manager for Corporate Payment Services is affected by a potential SQL Injection vulnerability (CVE-2019-4032)

Summary IBM Financial Transaction Manager for Corporate Payment Services FTM CPS for Multi-Platform has addressed the following vulnerability. A potential Blind SQL injection on a web service. Vulnerability Details CVEID: CVE-2019-4032 DESCRIPTION: IBM Financial Transaction Manager for Digital...

Bypass Vulnerability in Website Security Dog's SQL Injection Blocking Feature

Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. A bypass vulnerability exists in the SQL injection blocking feature of Website Security Dog. An attacker can bypass the SQL injection blocking feature of Website...

Improper check for access to application database (NC-SA-2018-015)

A too permissive check allowed an installed application that contained the Nextcloud client package name to obtain access to the database of the Nextcloud application. At time of disclosure there are no applications with in the Google Play Store that fullfill this requirement...

SQL Injection Vulnerability in Sichuan Yunbait Technology Co.

Sichuan Yunbait Technology Co., Ltd. is an Internet company dedicated to the field of network infrastructure services. There is a SQL injection vulnerability in the website building system of Sichuan Yunbat Technology Co. Attackers can use the vulnerability to obtain sensitive information in the...

Sql injection

Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql database access. The component is: Web login form. The attack vector is: An attacker can exploit the vulnerability by sending a malicious HTTP POST request. The fixed version is: 1.12.1...

CVE-2019-1010248

Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql database access. The component is: Web login form. The attack vector is: An attacker can exploit the vulnerability by sending a malicious HTTP POST request. The fixed version is: 1.12.1...

CVE-2019-1010104

TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...

CVE-2019-1010104

TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...

SQL Injection Vulnerability in DBShop System

DBShop is an e-commerce system. A SQL injection vulnerability exists in the DBShop system, which can be exploited by attackers to obtain sensitive information from the database...

Deepwoods Software WebLibrarian SQL Injection Vulnerability

Deepwoods Software WebLibrarian is a book management system plugin for use in WordPress from Deepwoods Software, USA. A SQL injection vulnerability exists in the 'AllBarCodes' function in Deepwoods Software WebLibrarian 3.5.2 and earlier versions. The vulnerability stems from a lack of validation...

CVE-2019-7666

Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash value of the password, which may allow an attacker with access to the database to login as admin without decrypting the password...

CVE-2019-7666

Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash value of the password, which may allow an attacker with access to the database to login as admin without decrypting the password...

Authentication flaw

Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash value of the password, which may allow an attacker with access to the database to login as admin without decrypting the password...

PT-2019-17022 · Postgresql +1 · Postgresql +1

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation with Automation Anywhere version 11 Description: The issue concerns the use of a high-privileged PostgreSQL account for database access in IBM Robotic Process Automation with Automation Anywhere. This could allo...

Security Bulletin: IBM Robotic Process Automation uses a PostgreSQL admin account for accessing the application database (CVE-2019-4298)

Summary IBM Robotic Process Automation uses a PostgreSQL admin account for accessing the application database. Vulnerability Details CVEID: CVE-2019-4298 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere uses a high privileged PostgreSQL account for database access which could...

SQL Injection Vulnerability in Zhongshan Zhike Network Brand Planning Website Building System

Zhongshan Zhike Network Brand Planning is a company that mainly deals with website construction, software development, VI design, domain name, server and other projects. Zhongshan Zhike Network Brand Planning website building system has a SQL injection vulnerability, which can be exploited by...