CVE-2020-22165

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2021-32582

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

Weseek GROWI 注入漏洞

Weseek GROWI is a suite of team collaboration software from Weseek Japan. An input validation error vulnerability exists in WESEEK GROWI that arises from a network system or product that does not properly validate input data. A remote attacker could exploit this vulnerability to obtain or tamper...

SQL Injection Vulnerability in Ke361 Backend Ca***.cl***.php

Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modular, driven and...

SQL Injection Vulnerability in Ke361 Backend Di***.cl***.php

Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modular, driven and...

SQL injection vulnerability exists in ke361 (CNVD-2021-24528)

Ke361 is an open source Taobao system. ke361 suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database data...

Ke361 suffers from SQL injection vulnerability (CNVD-2021-24524)

Ke361 is an open source Taobao system. Ke361 has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database data...

SQL Injection Vulnerability in Ke361 Frontend Go*** Functions

Ke361 is an open source Taobao system. Ke361 front-end Go function has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database data...

CVE-2021-1225

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities exist because the web-based management interface improperly validates value...

SQL injection vulnerability in UCMS background ai***.php file

UCMS is a content management system written in PHP. A SQL injection vulnerability exists in the ai.php file in the background of UCMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Rui Jiang Cloud Hyperconverged Computing Platform

Guangdong Ruijiang Cloud Computing Co., Ltd. is a leading Internet infrastructure service provider in China, which is committed to providing professional Internet Data Center IDC, Cloud Computing private cloud solution and public cloud cloud platform and overall solutions for industry application...

SQL Injection Vulnerability in the Frontend of Zibo Shining Network Technology Co.

Zibo Shining Network Technology Co., Ltd. enterprise station building system is a specialized solution for enterprise station building products. Zibo Shining Network Technology Co., Ltd. enterprise website building system foreground there is a SQL injection vulnerability, attackers can use the...

SQL Injection Vulnerability in Toonhill Studio's Website Building System

Toonhoe Studios is an internet solution provider and website development company. A SQL injection vulnerability exists in the Toonhide Studio website builder system, which can be exploited by attackers to obtain database information...

SQL Injection Vulnerability in in***.do Page of Website Building System at Shanghai BeltLeader Information Technology Co.

Ltd. is a new technology company based on independent innovation, to provide enterprises with the most valuable Internet products and services. A SQL injection vulnerability exists in the in.do page of the website building system of Shanghai BeltLeader Information Technology Co. An attacker can...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70835)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70830)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the comprehensive management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70798)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in Chongqing Billion Information Technology Co.

Ltd. referred to as: billion online, Chongqing billion is dedicated to brand website construction, Internet application development and network marketing, website construction is an important step in network marketing, according to the purpose of the enterprise's station, the overall positioning ...

SQL Injection Vulnerability in TEMMOKUMVC of Pizhou Tianmu Network Technology Co.

TEMMOKUMVC is Pizhou Tianmu Network Technology Co., Ltd. developed a professional PHP + MYSQL products, using the independent MVC framework for large and small and medium-sized enterprises of the open source MVC. Pizhou Tianmu Network Technology Co., Ltd TEMMOKUMVC SQL injection vulnerability,...

SQL Injection Vulnerability in Intelligent Internet of Things System of Nanjing Jiuzhe Software Technology Co.

Nanjing Jiuzhe Software Technology Co., Ltd. business scope includes: software development, technical services, technical consulting services, technology transfer and so on. Nanjing Jiuzhe Software Technology Co., Ltd. intelligent Internet of things system SQL injection vulnerability, attackers c...