SQL Injection Vulnerability in Xiaowei OA System of Beijing Xiaowei Help Technology Co.

Xiaowei OA system is Beijing Xiaowei Help Technology Co., Ltd. to provide mobile office platform for small and medium-sized enterprises. Ltd. SQL injection vulnerability exists in the small micro OA system, an attacker can use the vulnerability to obtain sensitive information in the database...

NexusPHP V1.5 suffers from SQL Injection Vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP v1.5, due to the program cheaterbox.php file fails to strictly filter the conusr parameter. Attackers can use this vulnerability to obtain...

IBOS Enterprise Collaboration Management Software MyshareController.php page actionShare function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionShare function on the MyshareController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the...

OAKlouds CCm@il 'password_hint' parameter SQL Injection Vulnerability at Huanji Technology Co.

OAKlouds CCm@il is a group collaborative communication system. A SQL injection vulnerability exists in the OAKlouds CCm@il 'passwordhint' parameter of Huanji Technology Co. An attacker can exploit this vulnerability to obtain sensitive database information...

ShopsN v3.0 SQL Injection Vulnerability in Frontend ProductController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 beta3 version ProductController.class.php file contains a SQL injection vulnerability , due to the system failed to strictly filter the guess function . Remote attackers can exploit the vulnerability to obtain sensitive database...

PHPSHE open source mall system moneylog.php SQL injection vulnerabilities exist

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. HPSHE open source mall system moneylog.php SQL...

SQL Injection Vulnerability in 'cate' Parameter of Aicheng Technology Website Building System

Chengdu Aicheng Technology Co., Ltd. is a collection of website planning, web design, website construction, network promotion seo keyword optimization, network integrated marketing and other business enterprises. There is a SQL injection vulnerability in the 'cate' parameter of the Aicheng...

IBOS Enterprise Collaboration Management software open source latest version ApiController.php page actionSearch function has SQL injection vulnerability

IBOS is a new enterprise co-location management platform that offers services such as commercial licensing, program customization, data conversion, storage services and more. IBOS enterprise collaborative management software open source latest version of ApiController.php page actionSearch functi...

WordPress IBPS Online Exam Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress IBPS Online Exam plugin. An attacker can exploit the vulnerability to...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System v2.1.6

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall System v2.1.6 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain database information...

FineCms SQL Injection Vulnerability (CNVD-2017-18531)

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A SQL injection vulnerability exists in FineCms version 5.0.9. A remote attacker can exploit this vulnerability to obtain all databases with the help of the 'catid' parameter in the...

Hanchao B2B2C Multi-User Mall System info method has SQL injection vulnerability

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall Systeminfo method exists SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

SQL injection vulnerability in the latest version of wstmall (CNVD-2017-19366)

WSTMall is a multi-commercial O2O open source system developed by Merchant Software based on thinkphp, is a system that can help companies and individuals to quickly build a community service system. The latest version of wstmall V1.9.4170630 has a SQL injection vulnerability, which can be...

Niushop open source mall system Config.php SQL injection vulnerabilities exist

NiuShop open source mall system , is by the Shanxi Niu Cool Information Technology Co., Ltd. completely independent design , research and development of a PHP open source e-commerce system . Niushop open source mall system Config.php SQL injection vulnerability exists . Attackers can use this...

SQL Injection Vulnerability in appcms comment.php

APPCMS is a professional APP content management system. APPCMS comment.php suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive database information or perform unauthorized operations...

Hopesys Web Management System version 1.0 /include/func.common.php referer header injection vulnerability

Hopesys website management system is based on LAMP development of enterprise/government website management system. Hopesys Website Management System version 1.0 /include/func.common.php referer header injection vulnerability. An attacker can use this vulnerability to obtain sensitive database...

Multiple SQL Injection Vulnerabilities in Ranzhi Collaboration Office Management System

RANZI Coworking Management System is an open source coworking system for small and medium-sized enterprises. Ranzhi Collaboration Office Management System version 4.2.3 has multiple SQL injection vulnerabilities, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in a_from parameter of xycms add_article.php page

XYCMS was formerly known as Nanjing XYCMS Enterprise Station Building System, which is a commercial station building system based on ASP development. Xycms SQL injection vulnerability, the system on the addarticle.php page afrom parameter is not effectively filtered, attackers can exploit the...

SQL injection vulnerability in siteinfo parameter of xycms add_ad.php page

XYCMS was formerly known as Nanjing XYCMS Enterprise Station Building System, which is a commercial station building system based on ASP development. Xycms SQL injection vulnerability, the system on the addad.php page siteinfo parameters are not effectively filtered, attackers can exploit the...

Two SQL Injection Vulnerabilities in Axublog Blog System

axublog is a PHP personal blog system. Two SQL injection vulnerabilities exist in Axublog blog system. An attacker can exploit the vulnerabilities to obtain database information...