SQL Injection Vulnerability in Shipping 100 Virtual Goods Autoship System T1

Shipping 100-Virtual Goods Auto-Shipping System is a powerful virtual goods automatic shipping system/article pay to read the system, without manual supervision, customers can buy online to automatically complete the transaction. There is a SQL injection vulnerability in T1 of Shipment100 Virtual...

OpenEMR SQL Injection Vulnerability (CNVD-2021-13205)

OpenEMR is an open source medical management system from the OpenEMR Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in OpenEMR that stems from a lack of...

SQL Injection Vulnerability in Backup Management Server of Hangzhou Hikvision Digital Technology Co.

Hikvision is a video-centric IoT solution provider, offering integrated security, smart business and big data services. A SQL injection vulnerability exists in the backup management server of Hangzhou Hikvision Digital Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Website Building System of Zhejiang Mufeng Network Technology Co.

Zhejiang Mufeng Network Technology Co., Ltd. is a website construction, website production, website development, graphic design and other core enterprises. Zhejiang Mufeng Network Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers t...

SQL injection vulnerability in the anti-evasion platform of Zhejiang Dahua Technology Co. Ltd. for medical treatment outside the company (CNVD-2021-15965)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the anti-evasion platform of Zhejiang Dahua Technology Co., Ltd. that can be exploited by attackers to obtain sensitive information fro...

Trend Micro OfficeScan XG and Trend Micro Apex One Access Control Error Vulnerabilities

Trend Micro OfficeScan XG and Trend Micro Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a distributed anti-virus software suite, and Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response capabilities. Tre...

SQL injection vulnerability in se***.php page of website building system of Guangzhou Chuangke Network Technology Co.

Guangzhou Chuangke Network Technology Co., Ltd. is a business service company that provides customers with marketing website construction, network marketing promotion, website hosting operation, website production, website design, website promotion and maintenance, website SEO optimization, WeCha...

SQL Injection Vulnerability in Lebang Website Building System (CNVD-2021-13481)

Hangzhou Lebang Technology Co., Ltd. is an Internet digital service integration organization integrating website mobile platform construction, mobile application development, network marketing integration and operation outsourcing. A SQL injection vulnerability exists in the Hangzhou Lebang websi...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd (CNVD-C-2021-11467)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a domestic service provider of the whole tourism industry chain with a high market share. There is a SQL injection vulnerability in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd. that can...

SQL Injection Vulnerability in the Integrated Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2021-05889)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a domestic service provider of the whole tourism industry chain with a high market share. There is a SQL injection vulnerability in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd. that can...

SQL Injection Vulnerability in the Integrated Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2021-05511)

The business scope of Beijing Zhongcheng Kexin Science and Technology Development Co., Ltd. includes: technology development and transfer, technical services; conference services; integration of computer systems and so on. There is a SQL injection vulnerability in the integrated management platfo...

SQL Injection Vulnerability in Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2021-05888)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a domestic service provider of the whole tourism industry chain with a high market share. There is a SQL injection vulnerability in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd. that can...

SQL Injection Vulnerability in Laiku Push E-commerce System (CNVD-2021-01318)

Laikepui E-commerce system is an e-commerce system using PHP5.6+ MYSQL5.5+ self-developed framework. Laikipu E-commerce system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in SMi CMS Education Group Website Group System

SMi CMS education group station group system is mainly oriented to education group, education bureau of primary and secondary school station group platform. SQL injection vulnerability exists in SMiCMS Education Group Web Group System, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Kingdee Collaboration Office Platform

Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...

SQL Injection Vulnerability in SMJS/jdjs Framework

SMJS/jdjs is a framework system. The SMJS/jdjs framework suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from a database...

PLEASE_READ_ME Ransomware Attacks 85K MySQL Servers

Researchers are warning on an active ransomware campaign that’s targeting MySQL database servers. The ransomware, called PLEASEREADME, has thus far breached at least 85,000 servers worldwide – and has posted at least 250,000 stolen databases on a website for sale. MySQL is an open-source relation...

SQL Injection Vulnerability in Hanvon Face Attendance Management System

Ltd. was founded in 1998. As a pioneer in the domestic artificial intelligence industry, Hanvon Technology has been dedicated to the research and application of intelligent interaction technology in multiple fields for more than 20 years. A SQL injection vulnerability exists in Hanvon's Face...

Unspecified vulnerability in TYPO3 view_statistics

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in the TYPO3 viewstatistics extension prior to version 2.0.1, which originates from saving all GET and POST data requested by the TYPO3 front-end to a...

GoodLayers LMS for Wordpress SQL Injection Vulnerability

GoodLayers LMS for Wordpress is a Learning Management System plugin from Goodlayers Software USA. A SQL injection vulnerability exists in Good Layers LMS Plugin version 2.1.4 and earlier versions, which can be exploited by attackers to obtain sensitive information about a database...