SQL injection vulnerability in prtp parameter of travel e-commerce platform belonging to Shenzhen Dingyou

The tourism e-commerce platform is also a platform for a business system that uses electronic means to operate the tourism industry and its distribution system, based on a network as the main body, a tourism information base and an electronic business bank. There is a SQL injection vulnerability ...

SQL Injection Vulnerability in DownFile.aspx Page of Jenohan Software's Periodicals and Magazines System.

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. The first SQL injection vulnerability exists in Nanjing...

SQL Injection Vulnerability in dicCode Parameter of Wave Software Administrative Services System

The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the dicCode parameter of the...

SQL Injection Vulnerability in Anhui Business Network CMS System

A SQL injection vulnerability exists in the CMS system of Anhui Business Network. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in CMS of Sichuan Shangliu Interactive Network Technology Co.

SQL injection vulnerability exists in the CMS of Sichuan Shangliu Interactive Network Technology Co. The vulnerability allows an attacker to exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Engineering Management System of Bonjour Technology Co.

The Project Management System is a complete project management solution. A SQL injection vulnerability exists in the Engineering Management System of Bonjour Technology. The URL where SQL injection exists is http://112.64.161.74:8000/, and the attacker obtains sensitive information about the...

SQL Injection Vulnerability in Zixiang OA Office System/OpenWindows/Openleibie_zlMc.aspx?id=parameter

Zhixiang OA office system is an enterprise office system. A SQL injection vulnerability exists in the OpenWindows/OpenleibiezlMc.aspx?id= parameter of the Zhixiang OA Office System, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Panmicro OA Office System Requestid Parameter

Panavision OA Office System is a coordination office software. A SQL injection vulnerability exists in the Panmicro OA Office System requestid parameter, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

Gobetters Video Conferencing System/web/systemconfig/guangboinfo.php?id=1&from=list parameter has SQL injection vulnerability

GoBetter video conferencing system is a pure software video conferencing system with high-performance audio and video interactions, as well as perfect data functions launched by GoBetter. An SQL injection vulnerability exists in the /web/systemconfig/guangboinfo.php?id=1&from=list parameter of th...

SQL Injection Vulnerability in OA System of Guangdong Oriental Thinking Technology Co.

Ltd. OA system is a set of office automation system, can solve the enterprises and institutions, government agencies, office automation and paperless office and other issues. Ltd. OA system there are SQL injection vulnerabilities, there are vulnerabilities in the link:...

[CVE-2014-7303] SGI Tempo System Database Exposure

SGI Tempo System Database Exposure Software: SGI Tempo SGI ICE-X Supercomputers Affected Versions: Unknown CVE Reference: CVE-2014-7303 Author: John Fitzpatrick, MWR Labs Severity: Low Risk Vendor: Silicon Graphics International Corp SGI Vendor Response: Uncooperative Description It is possible f...

SQL Injection Vulnerability in Mail Parameters of Submission System of Nanjing Jenohan Software Technology Co.

A generic SQL injection vulnerability exists in the submission system of Nanjing Jenohan Software Technology Co. Ltd. that allows an attacker to access sensitive information in the database. A SQL injection vulnerability exists in the Mail parameter in the Submission System/liuyan.aspx of Jenohan...

Joomla/WordPress XCloner Command Execution / Password Disclosure

XCloner plugin version 3.1.1 for WordPress and 3.5.1 for Joomla! suffers from arbitrary command execution, MySQL password disclosure, database backups exposed, unauthenticated remote access, and various other vulnerabilities. Title: XCloner Wordpress/Joomla! backup Plugin v3.1.1 Wordpress v3.5.1...

强智科技教务系统存在SQL注入漏洞导致多校中枪……

简要描述： 强智科技教务系统存在SQL注入漏洞，多校中枪…… 详细说明： 这个算是CMS吧？ 中枪学校及注入点 湖南商学院：http://jwgl.hnuc.edu.cn/Public/ShowGGTZ.asp?GGTZID=317【这里】 北京城市学院：http://114.255.66.248/jiaowu/Public/ShowGGTZ.asp?GGTZID=218【这里】 焦作大学：http://jw.jzu.cn/jiaowu/Public/ShowGGTZ.asp?GGTZID=1155【这里】...

School hassle-free voting system The use of 0day-vulnerability warning-the black bar safety net

Actually, it's not a 0day. Just a thought., recently bored. Disregard on the A5 looked under and found a voting system, rough look, with people a lot, so it is down under, study, the machine is set up to see, the code basically is nothing vulnerability, is my art bad bar, and transfer station, th...

Blizzard's Mobile Server Database Exposed by Warv0x (AKA Kaihoe)

Blizzard's Mobile Server Database Exposed byWarv0x AKA Kaihoe Warv0x AKA Kaihoe Hacker today expose the Database structure of one of the biggest Company "Blizzard Mobile ". The exposed data can be seen on a pastebin link. DATABASES EXPOSED LIST : admin egw glpi informationschema lost+found...

Critical Security Upgrade Notice for FormIt, Quip and Login

We received a report of a potential vulnerability in FormIt, Quip and Login that could be used to expose system settings including database information. This has been been corrected and new versions have been posted. Upgrading of FormIt, Login and Quip to the latest versions via Package Manager...

Improper access control

CNR Hikaye Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/hikaye.mdb...

eSmile Script - 'index.php' SQL Injection

eSmile index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : eSmile .:. Bug Type : Sql InjectionMysql .:. Dork : "Powered by: eSmile" =...

When the website does not allow upload ASP,CGI,CER,CDX,HTR and other types of files-bug warning-the black bar safety net

Method:Upload a shtm file, content is:!-- include file="conn. asp" - A direct request to the shtm file,conn. asp is unobstructed, the database path is also on hand. Parsing:!-- include file="conn. asp" - is an SSI Directive,its role is the"conn. asp"to copy the contents to the current page,when a...