EBCMS (Enterprise Website Version) v4.2 SQL Injection Vulnerability in Frontend Index.php Page

EBCMS short for EBCMS is a modular plug-in website management system based on PHP+Mysql. A SQL injection vulnerability exists in the Index.php page in the frontend of EBCMS Enterprise Website Edition v4.2. The vulnerability is due to the system failing to effectively filter user-submitted data. A...

Joomla! Quiz Deluxe component SQL injection vulnerability

Joomla! is an open source, cross-platform content management system developed using PHP and MySQL. A SQL injection vulnerability exists in the Quiz Deluxe component of Joomla! that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Tangshan Great Wall Network's Website Building System

The Great Wall Network Building System is a website building system. SQL injection vulnerability exists in the gsjj.asp page of the Great Wall Network website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in about.php Page of HopYoung Website Builder System

The Hop-Up Network Building System is a website building system. A SQL injection vulnerability exists in the about.php page of the HopYoung website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in the show.html/show.php page of the website building system of Sichuan Horizontal World Technology Co.

Ltd. is an Internet + solution provider and execution service provider. A SQL injection vulnerability exists in the show.html/show.php page of Sichuan Horizontal World Technology Co. The vulnerability is due to the system id parameter does not filter the data submitted by the user, remote attacke...

The Next Generation Of Genealogy Sitebuilding SQL Injection

========================================================================================== The Next Generation of Genealogy Sitebuilding SQL Injection Vulnerability ==========================================================================================...

Ocean CMS \admin\admin_collent_news.php page rColumn parameter SQL injection vulnerability

Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS \admin\admincollentnews.php page rColumn parameter SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive database information...

TUTUCMS system admin\Article.php page order parameter has SQL injection vulnerability

TUTUCMS is a set of CMS management program focusing on the development of image-based websites, using PHP+MYSQL architecture, which can run on different platforms Windows, Linux, Unix. A SQL injection vulnerability exists in the order parameter of the admin\Article.php page of the TUTUCMS system...

PHPSHE open source mall system bankname parameter SQL injection vulnerability

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system bankname parameters...

SQL Injection Vulnerability in Mythos™ Documentation Management System

Mythos™ Document Management System is a library management reference platform with a professional database as the backend data storage on Windows or UNIX/Linux platform. A SQL injection vulnerability exists in Mythic™ Document Management System, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in ViewOpern.aspx Page ID Parameter of Jinpan Non-Book Data Management System

Jinpan non-book information management system software is a set of B/S and C/S combined management system for the current common format files launched by Beijing Jinpan Tu Software Technology Co., Ltd. mainly provides readers with non-book resources remote call service, including: with the book...

IBM Sterling B2B Integrator Standard Edition SQL Injection Vulnerability

IBM Sterling B2B Integrator Standard Edition is the standard edition of a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A SQL injection...

SQL Injection Vulnerability in UCMS 'ajax.php' File

UCMS is a simple open source content management system. A SQL injection vulnerability exists in the UCMS 'ajax.php' file, which can be exploited by attackers to obtain sensitive information about the database...

Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2017-20513)

Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Analysis Services in Microsoft SQL Server. An attacker c...

DzzOffice v1.3.1 SQL Injection Vulnerability in Frontend

DzzOffice is a cloud storage management tool , based on the free open source release , can be used as a personal network disk , team , enterprise network disk for use . A SQL injection vulnerability exists in DzzOffice v1.3.1 due to the program failing to strictly filter the keyword parameter...

NexusPHP v1.5 cheaterbox.php file has SQL injection vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. NexusPHP v1.5 cheaterbox.php file delcheater parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL injection vulnerability of menuqx[1][6] parameter on roles.control.mydecms.php page of Xiancheng website builder system

Xiancheng building system is a set of PHP + mysql architecture with free open source article management system program. Xiancheng website builder system role.control.mydecms.php page menuqx16 parameter SQL injection vulnerability. Due to the system failing to effectively filter user-submitted dat...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System v2.1.6 [CNVD-2017-20678]

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall System v2.1.6 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain database information...

Finecms foreground catid parameter has SQL injection vulnerability

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. An SQL injection vulnerability exists in the frontend catid parameter of finecms. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in finecms Frontend Field Parameters

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A SQL injection vulnerability exists in the frontend field parameter of finecms. An attacker can exploit this vulnerability to obtain database information...