PT-2020-14863

Name of the Vulnerable Software and Affected Versions SAINT Security Suite versions 8.0 through 9.8.20 Description The issue allows a remote, authenticated attacker to gain unauthorized access to the database due to an SQL injection vulnerability in the Assets component. Recommendations For...

CVE-2020-16277: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability in the Analytics component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, authenticated attacker to gain unauthorized access to the database...

PT-2020-14864

Name of the Vulnerable Software and Affected Versions SAINT Security Suite versions 8.0 through 9.8.20 Description The issue is related to an SQL injection vulnerability in the Analytics component. This vulnerability allows a remote, authenticated attacker to gain unauthorized access to the...

SQL Injection Vulnerability in Website Building System of Shenzhen Shenzhou Tongda Network Technology Co.

Shenzhen Shenzhou Tongda Network Technology Co., Ltd, provides Tencent enterprise mailbox, high-end website construction PC website, cell phone website, WeChat public account, SEO optimization and promotion, enterprise WeChat and other network infrastructure services and network marketing and...

SQL Injection Vulnerability in Coal Mine Comprehensive Informatization Control Platform of Jiangsu Sanheng Technology Co.

Jiangsu Sanheng Technology Co., Ltd. is a joint-stock technology enterprise, the company's products mainly have three specialized directions: mine safety, mine communication, mine automatic control. The main systems are KJ70X coal mine safety monitoring system, KJ128A mine personnel management...

SQL Injection Vulnerability in OA Office System of Chengdu Huigao Software Co.

Chengdu Huigao Software Co., Ltd. is an OA software developer and service provider. A SQL injection vulnerability exists in the OA office system of Chengdu Huigao Software Co. The vulnerability can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in CMS Backend of Luoyang Yunye Information Technology Co.

Yunye CMS enterprise building system is a php open source cms specialized in small and medium-sized enterprise website construction. Luoyang Yunye Information Technology Co., Ltd. Yunye CMS background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive informatio...

CVE-2020-4328: Improper Neutralization of Special Elements used in an SQL Command

IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 177839...

SQL injection vulnerability in p***.php page of website building system of Inner Mongolia Wando Information Technology Co.

Wando Technology is an information technology company dedicated to enterprise informatization application services, in order to actively promote the development of enterprise informatization and e-commerce, because of the transparency, so the integrity of the enterprise policy. It is an applicati...

SQL injection vulnerability in p***.php page of website building system of Inner Mongolia Wando Information Technology Co.

Wando Technology is an information technology company dedicated to enterprise informatization application services, in order to actively promote the development of enterprise informatization and e-commerce, because of the transparency, so the integrity of the enterprise policy. It is an applicati...

SQL injection vulnerability in a***.php page of website building system of Inner Mongolia Wando Information Technology Co.

Wando Technology is an information technology company dedicated to enterprise informatization application services, in order to actively promote the development of enterprise informatization and e-commerce, because of the transparency, so the integrity of the enterprise policy. It is an applicati...

typo3 -- multiple vulnerabilities

Typo3 Team reports: In case an attacker manages to generate a valid cryptographic message authentication code HMAC-SHA1 - either by using a different existing vulnerability or in case the internal encryptionKey was exposed - it is possible to retrieve arbitrary files of a TYPO3 installation. This...

PT-2020-14601

Name of the Vulnerable Software and Affected Versions rConfig version 3.9.5 Description The issue allows a remote authenticated attacker to send crafted SQL statements to the "devices.crud.php" script using the custom Location parameter. This could enable the attacker to view, add, modify, or...

Gansu Xiusen Network Information Technology Co., Ltd. website building system has SQL injection vulnerabilities

Gansu Xiusen Network Information Technology Co., Ltd abbreviation: Xiusen Network, located in Anning District, Lanzhou, Gansu, the company is engaged in software development, website development and other high-tech. Gansu Xiusen Network Information Technology Co., Ltd. website building system has...

SQL Injection Vulnerability in Extreme CMS of Langfang Extreme Network Technology Co. Ltd (CNVD-2020-48972)

Extreme CMS is an open source and free PHPCMS web content management system. Ltd. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in the Website Building System of Zhucheng City Three Swords Network Media Limited (CNVD-2020-49382)

Zhucheng City Three Swords Network Media Co., Ltd. was established in 2005, is a local enterprise in Zhucheng City and neighboring cities e-commerce application service team. Zhucheng City Three Swords Network Media Co., Ltd. station building system there are SQL injection vulnerabilities,...

SQL Injection Vulnerability in Lizheng 2nd Generation Management Information System of Beijing Lizheng Software Co.

Founded in July 1995, Beijing Rizheng Software Co., Ltd. is a national high-tech enterprise and a "double-soft" software enterprise and software product certified enterprise. Ltd. has a SQL injection vulnerability in its 2nd generation management information system, which can be exploited by...

Guangzhou Huaji Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Ltd. is a professional commitment to enterprise information technology all aspects of the application of services of the Internet enterprises, is the domestic one-stop network marketing innovative e-commerce service organizations. Guangzhou Huaji Network Technology Co., Ltd. building system there...

SQL Injection Vulnerability in 5vshop E-commerce System of Shijiazhuang Zhenhong Network Technology Co.

5vshop belongs to Shijiazhuang Zhenghong Network Technology Co., Ltd, since 2004 has been committed to the enterprise Internet application of related services, engaged in enterprise, personal e-commerce website construction; e-commerce project planning, creativity, operation, to provide a...

SQL Injection Vulnerability in HongYuJD

HongYuJD is a mall website system of HongYu technology team. HongYuJD suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...