1299 matches found
SQL Injection Vulnerability in Hsycms V1.1 co***.php Page
Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. A SQL injection vulnerability exists in the co.php page of Hsycms V1.1, which can be exploited by attackers to obtain sensitive...
SQL Injection Vulnerability in HuCart br***.php Page
HuCart is a PHP+Mysql based enterprise building system CMS that can run on various server platforms such as Linux and Windows. A SQL injection vulnerability exists in the HuCart br.php page, which can be exploited by attackers to obtain sensitive information from the database...
S-CMS News Portal System SQL Injection Vulnerability in Frontend ne***/fo***.php Page
S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. A SQL injection vulnerability exists in the front-end ne/fo.php page of the S-CMS news portal system. An attacker can exploit the vulnerability to obta...
S-CMS School Building System SQL injection vulnerability in front-end ed***/fo***.php page
S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the ed/fo.php page of S-CMS School Building System. Attackers can use the vulnerability to...
S-CMS Enterprise Website Builder System SQL Injection Vulnerability in Frontend co***/fo***.php Page
S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the front co/fo.php page of S-CMS enterprise website builder system. Attackers can use the...
PT-2018-15246
Name of the Vulnerable Software and Affected Versions ERPNext versions 10.x through 11.0.3-beta.29 Description A SQL injection issue was discovered that allows an attacker to construct SQL queries to return any columns from any tables in the database. This issue is related to the...
Unauthorized Access Vulnerability in Full Version of ZZCMS
ZZCMS is a free and open source website building system, mainly facing the majority of webmasters. ZZCMS full version of unauthorized access vulnerability. The vulnerability stems from the website directory/admin/ad.php logic there are problems , you can directly disable java or use burp to modif...
SQL injection vulnerability in the or***.de***.php file in the background of Cloud EC e-commerce system
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system background or.de.php file SQL injection vulnerability. Attackers can use the...
SQL Injection Vulnerability in 56iq Digital Signage Software Frontend
56iq digital signage software is a digital signage content creation software, used to create exciting programs in plasma liquid crystal LCD flat-panel TVs, LED screens, projection equipment and other multimedia terminals playback and touch interactive applications. A SQL injection vulnerability...
SQL Injection Vulnerability in HuCart bo***.php Page
HuCart HuCart is an open source enterprise building system. HuCart version 5.7.4 bo.php page SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain database sensitive information...
SQL Injection Vulnerability in emlog v6.0.0 Backend co***.php Page
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend co.php page. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in emlog v6.0.0 Backend na***.php Page
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend na.php page. An attacker can exploit the vulnerability to obtain sensitive database information...
PHPOK 5.0.055 suffers from a SQL Injection Vulnerability
PHPOK system is a content management system for website construction developed by Shenzhen 锟铻科技有限公司formerly known as PHPOK Studio. A SQL injection vulnerability exists in PHPOK 5.0.055. The vulnerability is caused by poor filtering of user-submitted parameters. An attacker can exploit this...
SQL Injection Vulnerability in Taoyuan Enterprise Document Management System
Taoyuan enterprise document management system is in Taoyuan network hard disk V5.X mature platform, for enterprise, government, school, scientific research, media and other enterprise-level user applications for the development of professional electronic document network service system. There is ...
CVE-2018-15441: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in the web framework code of Cisco Prime License Manager PLM could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation of user-supplied input in SQL queries. An attacker could exploit this vulnerabilit...
zzzcms V1.5.7 php official version of the foreground in***.php page SQL injection vulnerability
zzcms is a free and open source building system, mainly facing the majority of webmasters to use. zzzcms V1.5.7 php official version of the foreground in.php page there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...
SQL Injection Vulnerability in HDCMS v2.0 groupLists Function
HDCMS is a content management system software package developed in PHP+Mysql. It provides customers with powerful and complete functionality to accomplish rapid website development. HDCMS v2.0 version groupLists function has a SQL injection vulnerability, remote attackers can use this vulnerabili...
SQL Injection Vulnerability in HDCMS v2.0 siteId Function
HDCMS is a content management system software package developed in PHP+Mysql. It provides customers with powerful and complete functionality to accomplish rapid website development. A SQL injection vulnerability exists in the HDCMS v2.0 siteId function, which can be exploited by remote attackers ...
SQL injection vulnerability in the V***.php file of Yunyu CMS enterprise website management system (CNVD-2018-24729)
YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. SQL injection vulnerability exists in the V.php file of YUNUCMS enterprise website management system. An attacker can exploit the...
S-CMS News Portal System me***.php page suffers from SQL injection vulnerability
S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. A SQL injection vulnerability exists in the me.php page of the S-CMS news portal system. An attacker can exploit the vulnerability to obtain sensitive...