SQL Injection Vulnerability in Water Rights Trading System (CNVD-2021-18286)

Tangshan Liulin Automation Equipment Co., Ltd. is a high-tech enterprise specializing in the research and development, production, sales and system engineering technical services of Internet of Things security communication terminal and intelligent application platform software. There is a SQL...

SQL Injection Vulnerability in OurPHP (CNVD-2021-18281)

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. OurPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in WDECP-IC Card Metering Management Platform of Tangshan Liulin Automation Equipment Co.

Tangshan Liulin Automation Equipment Co., Ltd. is a high-tech enterprise engaged in the research and development, production, sales and system engineering technical services of Internet of Things security communication terminal and intelligent application platform software. Tangshan Liulin...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16408)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

JC6 Collaborative OA Platform has SQL Injection Vulnerability

JC6 collaborative OA platform is a J2EE framework-based collaborative office platform developed by Beijing Jinhe Software Co. There is a SQL injection vulnerability in JC6 Collaborative OA Platform. Attackers can use the vulnerability to obtain sensitive database information...

SQL injection vulnerability in the website building system of Xinghua Xinwang Information Consulting Service Department (CNVD-2021-16005)

Xinghua letter network is a professional engaged in, Baidu keyword optimization and enterprise website construction and e-commerce services of the service provider. Xinghua City letter network information consulting services department building system there are SQL injection vulnerabilities,...

CVE-2021-26685: Improper Neutralization of Special Elements used in an SQL Command

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

SQL Injection Vulnerability in Ar***.asp of Website Building System of Guangzhou Hande Network Technology Co.

HANDS network originated from ten years ago, the studio is committed to providing users with high-quality website construction solutions, business covering PC station, mobile station, to provide high-quality customized and special templates station building services. Ltd. website building system...

XYCMS suffers from SQL injection vulnerability (CNVD-2021-17386)

XYCMS is an enterprise building system developed with asp+access. XYCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain database information...

HcCMS suffers from SQL injection vulnerability (CNVD-2021-17282)

HcCms is a free website building system developed in php language. Developed using the widely popular PHP MYSQL. HcCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

PT-2021-11048

Name of the Vulnerable Software and Affected Versions: Mailtrain versions 1.24.1 and earlier Description: The issue allows SQL Injection in the statsClickedSubscribersByColumn function in lib/models/campaigns.js via the "/campaigns/clicked/ajax" API endpoint because variable column names are not...

SQL Injection Vulnerability in zzcms 2020 (CNVD-2021-17363)

zzcms is a content management system. A SQL injection vulnerability exists in zzcms 2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Shangye Academic Portal Management Software

Founded in 2007, Shangye Technology is a high-tech enterprise integrating development, processing, agency and sales. Its main business includes electronic resources, software development and new media applications, providing information resource solutions and all-round technical and consulting...

Sql injection

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

CVE-2020-36002

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

Haiyan Chuangyi Software Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-16391)

Haiyan Chuangyi Software Technology Co., Ltd. is a high-tech enterprise specializing in research and development, application and service in the field of computer information technology. Haiyan Chuangyi Software Technology Co., Ltd. has a SQL injection vulnerability in its website building system...

CVE-2020-36002: Improper Neutralization of Special Elements used in an SQL Command

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

SQL Injection Vulnerability in the Website Building System of Foshan City Sohu Network Technology Co.

Foshan City, Sohu Network Technology Co., Ltd. is a commitment to provide a full range of web site construction services for the enterprise Internet company. Foshan City, Sohu Network Technology Co., Ltd. building system there is a SQL injection vulnerability, attackers can use the vulnerability ...

SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co. Ltd (CNVD-2021-14897)

Inner Mongolia Hohai Trade Co., Ltd. to enterprises and institutions for the construction of information technology. Mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection...

Chengdu Zero Takeoff Network 07FLY-CRM V1 has SQL Injection Vulnerability

07FLY-CRM is zero take-off network development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed assets, public...