SQL Injection Vulnerability in Guotai Newpoint Public Resources Trading Platform

Jiangsu Guotai New Point Software Co., Ltd. is an informatization total solution provider, focusing on the fields of smart government, smart transaction, smart city park, construction industry and so on. A SQL injection vulnerability exists in Guotai Newpoint's public resources trading platform,...

Multiple RICOH Interactive Whiteboard Products SQL Injection Vulnerabilities

RICOH Interactive Whiteboard D2200 and others are multifunction printer devices from Ricoh, Japan. A SQL injection vulnerability exists in multiple RICOH Interactive Whiteboard products, which can be exploited by remote attackers to obtain or modify information in a database...

SQL injection vulnerability in in***.php page of website building system of Chengdu Shumei Network Technology Co.

Chengdu Shumei Network Technology Co., Ltd. is an Internet company that focuses on strategy, creativity, design, technology, marketing and service. There is a SQL injection vulnerability in the in.php page of Chengdu Shumei Network Technology Co. Attackers can use the vulnerability to obtain...

SaltOS SQL Injection Vulnerability (CNVD-2019-00827)

SaltOS is a suite of enterprise management solutions from the SaltOS program. The product integrates features such as CRM Customer Relationship Management and ERP Enterprise Resource Planning. A SQL injection vulnerability exists in SaltOS version 3.1 r8126, which can be exploited by remote...

SQL Injection Vulnerability in Nanjing Yunhuatong Network Technology Website Building System

Nanjing Yunhuatong Network Technology Station Building System is an enterprise station building system developed by Nanjing Yunhuatong Network Technology Co. There is a SQL injection vulnerability in Nanjing Yunhuatong Network Technology website building system, which can be exploited by attacker...

PHP Cloud Talent System 4.6 (phpyun) SQL Injection Vulnerability

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A SQL injection vulnerability exists in the backend of phpyun v4.6. Attackers can use the vulnerability to obtain sensitive information in the databa...

SQL injection vulnerability in OURPHP backend ou***.php file

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OURPHP background ou.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

PHPTPoint Hospital Management System 1 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: phptpoint hospital management system Multiple SQL injection Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.phptpoint.com/ Software Link:...

PHPTPoint Hospital Management System 1 SQL Injection

Exploit Title: phptpoint hospital management system Multiple SQL injection Date: 10/24/2018 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.phptpoint.com/ Software Link: https://www.phptpoint.com/hospital-management-system/ Version: 1 Tested on: WAMP...

CVE-2018-11079

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An authenticated malicious user with access to the configuration file may obtain the exposed password to gain...

CVE-2018-11079

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An authenticated malicious user with access to the configuration file may obtain the exposed password to gain...

S-CMS News Portal System SQL Injection Vulnerability in Frontend

S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. A SQL injection vulnerability exists in the frontend of S-CMS News Portal System. Attackers can use the vulnerability to obtain sensitive information i...

CVE-2018-17797

An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

Directory traversal

An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-17798

An issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete arbitrary files via an absolute pathname in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

Design/Logic Flaw

An issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete arbitrary files via an absolute pathname in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-17797

An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-17798

An issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete arbitrary files via an absolute pathname in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

Symfony Configuration Cheat Sheet

The Symfony framework provides web developers with a great foundation for their PHP applications. Several components can be used for many recurring tasks that are required in every application, such as handling input forms or accessing a database. In addition to functional tasks, security-relevan...

Provisioning Services 7.X: Target Devices Fail To Boot With Error "No servers available for disk"

When we start the Target Device, we notice the following error on the device during boot process. "No servers available for disk" We also notice Database Access errors for certain functions on the Event Viewer of PVS Server...