SQL Injection Vulnerability in hdcmsv1.2 System

HDCMS is a content management system package written in PHP , the database using Mysql. to provide powerful , complete functionality to complete the rapid development of the site . HDCMS system version 1.2 SQL injection vulnerability, remote attackers can exploit the vulnerability to obtain...

MiTop website building system multiple versions exist SQL injection vulnerabilities

Mito building system is a commercial open source building system, using PHP + MYSQL architecture. There is a SQL injection vulnerability in the MiTo website builder system. The vulnerability stems from the program parameters are not effectively filtered , attackers can use the vulnerability to...

CVE-2018-9102

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 21.84.5535.0 and earlier, and Mitel ST 14.2, versions GA27 19.49.5200.0 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for...

SQL injection vulnerability in admin.class.php page of UQCMS Cloud B2B2C multi-store system

UQCMS cloud business system is a program using PHP + MYSQL, template using smarty template B2B2C e-commerce software. UQCMS cloud business B2B2C multi-store system admin.class.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

CwCms v1.8_asp Exists SQL Injection Vulnerability

CwCMS is a customized ASP+Access/MsSql content management system specifically designed for corporate websites. CwCms v1.8asp suffers from a SQL injection vulnerability. The vulnerability stems from the program does not strictly filter parameters. An attacker can exploit this vulnerability to obta...

SQL injection vulnerability in user.mod.php file of UQCMS Cloud B2B2C multi-store system

UQCMS cloud business system is a program using PHP + MYSQL, template using smarty template B2B2C e-commerce software. UQCMS Cloud Business B2B2C multi-store system user.mod.php file has a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Jiangxi Lugu Network Technology Co., Ltd. website construction system with SQL injection vulnerability

Jiangxi Six Valley Network Technology Co., Ltd. is a company that provides targeted, personalized enterprise website construction solutions. Jiangxi LiuGu Network Technology Co., Ltd. website construction system exists SQL injection vulnerability. Attackers can use the vulnerability to access or...

SQL Injection Vulnerability in Dispnews.asp Page of Website Construction System of Jingmen Xinnet Technology Development Co.

Jingmen City, Xin network technology development limited company is a network brand marketing and enterprise management information technology professional service providers. There is a SQL injection vulnerability in the dispnews.asp page of the website construction system of Jingmen Xinnet...

SQL injection vulnerability in the program\diypage\show\admin.php page of the Monxin enterprise station-building system program\diypage\show\admin.php

Monxin Enterprise Station Building System is a self-service station building system based on PHP language development. A SQL injection vulnerability exists in the program\diypage\show\admin.php page of the Monxin Enterprise Station Building System. The vulnerability is due to the system fails to...

SQL Injection Vulnerability in ThinkLC Category Information System category.php Page

ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the category.php page of the ThinkLC Classified Information System, which allows attackers to exploit the vulnerability to obtain sensitive...

SQL injection vulnerability in Ocean CMS \admin\admin_ajax.php page

Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS \admin\adminajax.php page SQL injection vulnerability. The vulnerability is due to the system failing to effectively filter the data submitted by the user. An attack...

SQL injection vulnerability in article_detal.php page of Xiamen Eltong Network Technology Co.

Eltron website builder is a website builder system. A SQL injection vulnerability exists in the articledetal.php page of the website builder system of Xiamen Eltong Network Technology Co. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL injection vulnerability in show.php, view.php and a.php pages of Shenzhen Yitianlian Technology Co.

Shenzhen Yitianlian Technology Co., Ltd. is a network operator providing online marketing services for enterprises. A SQL injection vulnerability exists in the show.php, view.php, and a.php pages of the website builder system of Shenzhen Yitianlian, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Multiple Pages of Zibo Shining Network Technology Co.

Flash CMS is a flash website system developed by Zibo Flash Network Technology Co. There is a SQL injection vulnerability in the text.asp page and slideshowinfo.asp page of the flash CMS of Zibo Flash Network Technology Co. Allow attackers to exploit the vulnerability to obtain sensitive...

Uc365 website category navigation system adver_name parameter exists sql injection vulnerability

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website category navigation system advername parameter there is a sql injectio...

JTBCcms 'uu_upload_file' function has SQL injection vulnerability

JTBC is an open source and free cross-platform web content management system solution. JTBCcms 'uuuploadfile' function SQL injection vulnerability. The vulnerability is caused by the failure to effectively filter the parameters used in the user upload file , an attacker can exploit the...

SQL Injection Vulnerability in Shen Yue Software Provident Fund System

Shen Yue Software is a company that provides housing fund management software. A SQL injection vulnerability exists in Shen Yue Software's provident fund system. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in ShowAjaxOptions Function of Tibco Call Center System

The core of the Tibco call center system is a communication-based enterprise internal and external communication system. A SQL injection vulnerability exists in the showAjaxOptions function of the Tibco Call Center System. Vulnerability file: /userweb/php/index/Outbound.class.php, exploit: UNION...

PT-2016-4489 · Ipswitch · Ipswitch Whatsup Gold

Name of the Vulnerable Software and Affected Versions: Ipswitch WhatsUp Gold version 16.4.1 Description: The issue is related to a Blind SQL Injection in the sUniqueID parameter of the WrFreeFormText.asp page. This allows for potential unauthorized access to database information. Recommendations:...

SQL Injection Vulnerability in Gobetter Video Conference System of Beijing Gobetter Technology Co.

Gobalt network video conferencing system supports thousands of people to participate in the meeting at the same time, supporting work meetings, remote training, product sales, online seminars, consulting services and other application scenarios. The product has a SQL injection vulnerability, the...