SQL Injection Vulnerability in YzmCMS /member/account.php Page

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS /member/account.php page has a SQL injection vulnerability. Because the /member/account.php page does not filter parameters, an...

SQL Injection Vulnerability in YzmCMS email.php

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A SQL injection vulnerability exists in YzmCMS email.php. An attacker can exploit the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Mito MetInfo V5.3 Backend

MetInfo is an enterprise website management system with PHP Mysql architecture. A SQL injection vulnerability exists in the backend of MetInfo V5.3. Due to the lack of filtering of the class1 parameter, which allows attackers to exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in BageCms

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms suffers from a SQL injection vulnerability. The lack of filtering of the 'title' parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

BigTree CMS SQL Injection Vulnerability

BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in versions of Bigtree Cms prior to 4.1.16, which stems from the program failing to adequately filter user-submitted input. An attacker can...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2016-11171)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...

Microsoft SQL Server Multiple Vulnerabilities (MS16-136)

Microsoft SQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Schoolhos CMS 2.29 Multiple vulnerabilities / RCE Exploit

Exploit for php platform in category web applications \x0d\x0a-----------------------------26518470919255\x0d\x0a\x0d\x0a' \ 'http://HOST/PATH/elearningku/proses.php?pilih=guru&untukdi=upload' php file...

Sql injection

SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue...

CVE-2016-9282

SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...

Sql injection

SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...

CVE-2016-9282

SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...

CVE-2016-9282

SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...

CVE-2016-9283

SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue...

CVE-2016-9272

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

Ufo UFO-UAPWS suffers from SQL error reporting injection vulnerability (CNVD-2016-10771)

Ufo UFO-UAPWS Reporting System is an Internet solution for enterprises. A SQL reporting error injection vulnerability exists in UFIDA UFO-UAPWS. An attacker exploiting the vulnerability can view sensitive information, obtain database information, and cause information leakage...

SQL Injection Vulnerability in FileID Parameter of Digital Campus Management System of Shanghai Pengda Computer System Development Co.

The digital campus system of Shanghai Pengda Computer System Development Co., Ltd. is a technology platform using .NET+SqlServer. NET+SqlServer technology platform. SQL injection vulnerability exists in the Digital Campus Management System/BG/Mail/Mail/DownAttach.aspx page of Shanghai Pengda...

SQL Injection Vulnerability in Mixcall Seat Management System check_fieldvalue Function

Mixcall seat management system is based on B/S architecture, the management personnel can directly log into the Mixcall seat management center through the computer, and view the detailed situation related to the seat personnel's voice services. A SQL injection vulnerability exists in the...

SQL Injection Vulnerability in ShowgetAdminUser Function of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. A SQL injection vulnerability exists in the showgetAdminUser function of the Tibco Call Center System. The vulnerability file: /userweb/php/sms/sms.class.php allows attackers ...

SQL Injection Vulnerability in fangmail Mail System

FangMail email system adopts distributed system architecture and built-in fourth-generation anti-spam gateway based on cloud technology. A SQL injection vulnerability exists in fangmail mail system. The lack of filtering of the 'username' parameter allows attackers to exploit the vulnerability to...