3987 matches found
Shenzhen Dingcheng Internet Technology Co., Ltd. official website builder system SQL injection vulnerability
Enterprise official website building system provides a variety of website data system, each site according to different characteristics and industries to choose, Dingcheng network independent development of the background program. Shenzhen Dingcheng Internet Technology Co., Ltd. official website...
SQL Injection Vulnerability in Beijing Super Star Huiya Digital Book Literature Service System
Huiya Digital Book and Documentation Service System is an online Chinese library. The product suffers from SQL injection vulnerability, which can be exploited by attackers to obtain database information...
WordPress Video Player SQL Injection Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation.WordPress Video Player is a video plugin for WordPress, through which you can easily add videos to your website. WordPress Video Player has multiple SQL injection vulnerabilities. An...
PornHub Pays Hackers $20,000 to Find Zero-day Flaws in its Website
Cyber attacks get bigger, smarter, more damaging. PrnHub launched its bug bounty program two months ago to encourage hackers and bug bounty hunters to find and responsibly report flaws in its services and get rewarded. Now, it turns out that the world's most popular prngraphy site has paid its...
TeamPass 'users.queries.php' SQL Injection Vulnerability
TeamPass is a dedicated password manager for Apache, MySQL and PHP. TeamPass suffers from a SQL injection vulnerability that can be exploited by remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...
Tmdocs dns_dhcp SQL Injection Vulnerability
Tmdocs dnsdhcp is a web interface that allows management of DNSmasq a tool for configuring DNS and DHCP and static DHCP leases in Mikrotik routers. A SQL injection vulnerability exists in Tmdocs dnsdhcp. An attacker could use this vulnerability to take control of an application, access or modify...
SQL Injection Vulnerability in the Remote Consultation System of Beijing Blue Weather Technology Co.
BlueVision is a high-tech company that provides telemedicine services. A SQL injection vulnerability exists in the Blue Guardian Teleconsultation System of Tong Technology Limited, which can be exploited by attackers to obtain database data...
SQL Injection Vulnerability in the Food and Drug Administration Portal of Sea Rainbow Enterprises (Holdings) Co.
Sea Rainbow Enterprises Holdings Limited Food and Drug Administration Portal System is a set of portals designed for the Food and Drug Administration around the world. A SQL injection vulnerability exists in the Food and Drug Administration portal system. An attacker can exploit the vulnerability...
Siemens SICAM PAS Information Disclosure Vulnerability
SICAM PAS is an energy automation solution for the operation of substation equipment. It has open communication interfaces for power system control and control of industrial power supply equipment. An information disclosure vulnerability exists in Siemens SICAM PAS. An attacker with privileged...
Siemens SICAM PAS Information Disclosure Vulnerability (CNVD-2016-04434)
SICAM PAS is an energy automation solution for the operation of substation equipment. It has open communication interfaces for power system control and control of industrial power supply equipment. An information disclosure vulnerability exists in Siemens SICAM PAS. An authenticated, local attack...
MySQL Server Login Possible
Nessus was able to log into the remote MySQL server using the supplied credentials. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid91823; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/01/27"; scriptnameenglish:"MySQL Server Log...
Generalized SQL Injection Vulnerability in Triple-Meaning Network CMS System
Three Tomorrow Italian Network CMS is a website building system for major enterprises and social organizations. Three Tomorrow's Intentions Web CMS has a sql injection vulnerability, through which an attacker can obtain database information, resulting in the disclosure of sensitive information...
MEDHOST Perioperative Information Management System Unauthorized Operation Vulnerability
MEDHOST Perioperative Information Management System PIMS is a suite of solutions covering surgical treatment, nursing care and other services from MEDHOST, Inc. that includes an anesthesia information management system AIMS, remote host control and streamlined patient tracking. A security...
Linknat SQL Injection Vulnerability
Linknat suffers from a SQL injection vulnerability. An attacker is able to execute malicious sql commands to connect to dbms...
SAP NetWeaver AS JAVA SQL Injection Vulnerability
SAP NetWeaver is an integrated, service-oriented application platform that provides a development and runtime environment for SAP applications.SAP NetWeaver AS Java is an application server that runs in NetWeaver and is based on the Java programming language. An SQL injection vulnerability exists...
MEDHOST Perioperative Information Management System contains hard-coded database credentials
Overview MEDHOST Perioperative Information Management System PIMS versions prior to 2015R1 contain hard-coded credentials that are used for customer database access. Description CWE-798: Use of Hard-coded Credentials - CVE-2016-4328MEDHOST PIMS, previously branded as VPIMS, contains hard-coded...
ManageEngine Applications Manager < 12710 Multiple Vulnerabilities - Active Check
ManageEngine Applications Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Techsoft WS CMS SQL Injection Vulnerability
TECHSOFT is a WEB solution. A remote SQL injection vulnerability exists in Techsoft Content Management System 2016 Q2. A remote attacker is able to execute malicious SQL commands to connect to dbms...
Patron Info System SQL Injection Vulnerability
Patron Info System is a customer information system. Patron Info System has a remote sql injection vulnerability that allows remote attackers to execute malicious sql commands to connect to dbms...