Metinfo MetInfo SQL注入漏洞

Metinfo MetInfo is a content management system CMS developed by China's Metinfo using PHP and Mysql. A SQL injection vulnerability exists in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0, which allows attackers to access sensitive database information...

PT-2021-11648 · Unknown · Wayang-Cms

Name of the Vulnerable Software and Affected Versions: Wayang-CMS version 1.0 Description: A SQL injection issue in the wy controlls/wy side visitor.php file allows attackers to obtain sensitive database information. Recommendations: For Wayang-CMS version 1.0, consider restricting access to the ...

SQL Injection Vulnerability in Asset Management System of Fujian Boss Software Co.

Fujian BOSS Software Co., Ltd. is the undertaking unit of "National Torch Plan Project" and "Innovation Fund Support Project" of Ministry of Science and Technology. A SQL injection vulnerability exists in the asset management system of Fujian Boss Software Co., Ltd, which can be exploited by...

SQL Injection Vulnerability in the Website Building System of Tianjin Jixiang Enterprise and Commerce Technology Co.

Tianjin Jixiang Enterprise and Business Technology Co., Ltd. is a company dedicated to providing enterprises with Baidu promotion, website construction, micro station, APP development and other Internet integrated service providers. There is a SQL injection vulnerability in the website building...

SQL Injection Vulnerability in MSVOD Video System

MSVOD Video System is a free movie watching software. MSVOD Video System suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in myeye Backend Management

Myeye is a monitoring and control system. A SQL injection vulnerability exists in the backend administration of Myeye, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2021-24200

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=getwdtable&tableid=1, on the 'length' HTTP POST parameter...

Station master CMS backstage exists universal password login vulnerability

Station Helpers CMS is committed to creating a full-featured CMS open source system. Station Helpers CMS backend exists universal password login vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Shenyang Zhihong Website Building System

Shenyang Zhihong Business Advertising Co., Ltd. is to metal materials information services as a starting point, after more than 10 years of development to form a metal, website, personnel training and other professional areas to provide supply and demand, advertising and a combination of...

SQL Injection Vulnerability in Teleconferencing System of Beijing Dexit Technology Co.

The conference call system is an integrated EasyMeeting Web to realize the integration of teleconferencing and web conferencing, and will be integrated with Microsoft, IBM and other industry mainstream office applications. There is a SQL injection vulnerability in Beijing Dexit Teleconference...

Wordpress Blog2Social SQL Injection Vulnerability

Wordpress Blog2Social is an application plugin for Wordpress. Provides an automatic posting and updating feature. A SQL injection vulnerability exists in WordPress Blog2Social plugin versions prior to 6.3.1, which stems from the fact that unauthenticated input can lead to SQL injection in the...

SQL Injection Vulnerability in Website Building System of Foshan Sanliu Network Technology Co.

Foshan Sanliu Network Technology Co., Ltd. is an advertising technology service provider specializing in network promotion. There is a SQL injection vulnerability in the website system of Foshan Sanliu Network Technology Co. An attacker can exploit the vulnerability to obtain sensitive informatio...

SQL Injection Vulnerability in Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. There is a SQL injection vulnerability in the Home Decoration ERP Management System of Shanghai Decoration Alliance Information Technology Co., Ltd, which can be exploited by attackers ...

CVE-2021-26685

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

CVE-2020-36002

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

SQL Injection Vulnerability in UFIDA U8-OA se***.jsp

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA se.jsp, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2021-22851

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter document management page to obtain database schema and data...

SQL injection vulnerability in oasys (OA automated office system) (CNVD-2021-08423)

oasys OA automated office system is oriented to the daily operation and management of the organization, employees and managers use the application system to improve the efficiency of the company's office. A SQL injection vulnerability exists in oasys OA automated office system. An attacker can...

CVE-2021-23837

An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selectedfolder HTTP request body parameter for the acp interface. The affected parameter which retrieves the file contents of the specified folder was found to be accepting malicious...

USN-4693-1 ampache vulnerabilities

It was discovered that an SQL injection vulnerability exists in the Ampache search engine. Any user able to perform searches could dump any data contained in the database. An attacker could use this to disclose sensitive information. CVE-2019-12385 It was discovered that an XSS vulnerability in...