SQL injection vulnerability in getip function of mallbuilder foreground convertip.php file

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. The mallbuilder front-end getip function suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Cookie injection vulnerability in mallbuilder frontend v7.3.4 home.php file

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. mallbuilder v7.3.4 has a SQL injection vulnerability in the foreground home.php, which allows attackers to obtain sensitive database information using common SQL injection tools...

ZYCHCMS 'Fieldid' Parameter Has SQL Injection Vulnerability

ZYCHCMS is an enterprise website management system. ZYCHCMS v06 Build161216 suffers from a SQL injection vulnerability. The lack of filtering of the 'Fieldid' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...

Multiple IBM DB2 Product Information Disclosure Vulnerabilities

IBM DB2 is a relational database management system from IBM in the United States. An information disclosure vulnerability exists in IBM DB2 versions 10.1, 10.5, and 11.1 based on AIX, Linux, HP, Solaris, or Windows platforms. An attacker could exploit this vulnerability to obtain sensitive...

WordPress Sites Exposed by Vulnerable Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Sites Exposed by Vulnerable plugin, which allows attackers to exploit t...

WordPress Plugin NextGEN Gallery SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin NextGEN Gallery. It allows unauthenticated users to obtain...

SQL Injection Vulnerability in 'id' Parameter of Single Point CRM System

Single point CRM system is a single point of technology development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies , fixed...

SQL Injection Vulnerability in Ocean CMS uesMode Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admincollect.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'uesMode' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about t...

SQL Injection Vulnerability in Ocean CMS v_field Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admindatarelate.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'vfield' parameter allows attackers to exploit the vulnerability to obtain sensitive database informatio...

SQL Injection Vulnerability in Ocean CMS ckey Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the adminpay.php page of the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'ckey' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the...

SQL Injection Vulnerability in Ocean CMS v_name Parameter

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the adminajax.php page of Ocean CMS 6.46 utf-8 official version. The lack of filtering of the 'vname' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

YXcms photoController.php SQL Injection Vulnerability

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. A SQL injection vulnerability exists in YXcms photoController.php. Allow attackers to exploit the vulnerability to obtain sensitive database information...

YXcms newsController.php SQL Injection Vulnerability

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. A SQL injection vulnerability exists in YXcms newsController.php. Allow attackers to exploit the vulnerability to obtain sensitive database information...

Multi-meter (DuomiCms) film and television management system v_name parameters exist SQL injection vulnerability

Duomi DuomiCms film and television management system is a set of specialized video on demand system. A SQL injection vulnerability exists in DuomiCms. The lack of filtering of the 'vname' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

CVE-2016-9410

MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates...

Information disclosure

MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates...

CVE-2016-9410

MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates...

SQL Injection Vulnerability in the 'id[]' Parameter of Business Easy CMS

Shangyi CMS, or 31cms for short, is a drop-in microsoft public platform management system. A SQL injection vulnerability exists in Business Easy CMS. The lack of filtering of the 'id' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...

SQL Injection Vulnerability in YunGouCMS shopid

YunGouCMS is a website builder provided by Taurus Networks for the cloud purchasing model. YunGouCMS suffers from a SQL injection vulnerability. The lack of filtering of user input in the shopid parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

Joomla com_blog_calendar SQL injection vulnerability

A SQL Injection Vulnerability has been discovered in the Joomla Module called comblogcalendar. The Vulnerability is located in the index.php?option=comblogcalendar&modid=xxx Parameter. Attackers are able to execute own SQL commands by usage of a GET Method Request with manipulated modid Value...