SQL injection vulnerability in the open source version of UX365 website navigation

Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...

PT-2021-17841

Name of the Vulnerable Software and Affected Versions: Online Ordering System version 1.0 Description: The issue allows for unauthenticated SQL injection through the "/onlineordering/GPST/admin/design.php" API endpoint, which may lead to database information disclosure. Recommendations: For Onlin...

SQL Injection Vulnerability in the in***.jsp Page of Zhiyuan A6-s Collaborative Management Software

Zhiyuan A6-s Collaboration Management Software is a set of collaborative office management software that can help small and micro-organizations of enterprises and institutions, government agencies, social groups, and a department within a medium or large organization to quickly deliver products...

SQL Injection Vulnerability in the Enterprise Management System for Building Materials of Xiangyang Softpro Information Technology Co.

Ltd. is located in Room 2-2712, Jinxiu Tianchi SOHO-A1 Building, Checheng Road, High-tech Zone, Xiangyang City, Hubei Province, is a high-tech enterprise specializing in software development, mobile software customization, software sales and implementation. Ltd.'s Softpro Building Materials...

SQL Injection Vulnerability in SPAdmin

SPAdmin is a backend management system can be quickly developed , integrated with rich third-party APP , the core technology SpringBoot, JPA, Shiro. SPAdmin has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

JPress suffers from a SQL injection vulnerability (CNVD-2021-23374)

JPress is a product developed using Java, similar to WordPress. JPress suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

DedeCMS suffers from SQL injection vulnerability (CNVD-2021-23369)

DedeCMS is a versatile tool that allows for comprehensive management of various sections on a website. DedeCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...

SQL Injection Vulnerability in youphp Enterprise Website Management System

Yourphp enterprise website management system is a free PHP + MYSQL system, the core is based on Thinkphp framework highly refined secondary development. Yourphp Enterprise Website Management System suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-23514)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22935)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-23516)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22938)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22941)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in Joomla DigiCom component up*** function (CNVD-2021-21596)

Joomla is a globally recognized content management system, with 6% of the world's website market share. Joomla! is a software system developed using the PHP language with a MySQL database.DigiCom is a third-party component of Joomla. Joomla DigiCom component up function SQL injection vulnerabilit...

SQL injection vulnerability in Joomla DigiCom component va*** function (CNVD-2021-21595)

Joomla is a globally recognized content management system, with 6% of the world's website market share. Joomla! is a software system developed using the PHP language with a MySQL database.DigiCom is a third-party component of Joomla. A SQL injection vulnerability exists in the va function of the...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-21531)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Henan Qingfeng Network Technology Co., Ltd. website building system has SQL injection vulnerabilities (CNVD-2021-21528)

Henan Qingfeng Network Technology Co., Ltd. is a high-tech company mainly operating in network services, engaged in website production, network marketing planning, software development, talent information services and other businesses. Henan Qingfeng Network Technology Co., Ltd. website building...

SQL injection vulnerability exists in yycms (CNVD-2021-21570)

yycms is a movie and TV building system. yycms has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in East 8 Brand Creative (Qingdao) Co.

East 8 Brand Creative Qingdao Co., Ltd. was established on May 25, 2006 . Legal representative Xu Jingwei, the company's scope of business includes: brand design, planning and promotion; graphic design; packaging design; network information technology services, website design, website constructio...

SQL Injection Vulnerability in Water Rights Trading System (CNVD-2021-18287)

Tangshan Liulin Automation Equipment Co., Ltd. is a high-tech enterprise specializing in the research and development, production, sales and system engineering technical services of Internet of Things security communication terminal and intelligent application platform software. There is a SQL...