doorGets SQL Injection Vulnerability (CNVD-2019-13795)

DoorGets is a free and open source content management system. A SQL injection vulnerability exists in /doorgets/app/views/ajax/contactView.php in doorGets 7.0. The vulnerability can be exploited by a remote, ordinary registered user to obtain sensitive database information...

CVE-2019-11622

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user or a user with permission to manage modulecategory could exploit the vulnerability to obtain database sensitive information via...

Sql injection

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/contactView.php. A remote normal registered user could exploit the vulnerability to obtain database sensitive information...

CVE-2019-11625: Improper Neutralization of Special Elements used in an SQL Command

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/emailingRequest.php. A remote background administrator privilege user or a user with permission to manage emailing could exploit the vulnerability to obtain database sensitive information...

CVE-2019-11621: Improper Neutralization of Special Elements used in an SQL Command

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=network. A remote background administrator privilege user or a user with permission to manage network configuration could exploit the vulnerability to obtain database sensitive...

PT-2019-12427

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue is related to a SQL injection vulnerability in the /doorgets/app/requests/user/modulecategoryRequest.php file. A remote user with background administrator privileges or permission to manage...

PT-2019-12430

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote background administrator privilege user, or a user with permission to manage configuration siteweb, to exploit a SQL injection vulnerability. This vulnerability is located in the...

PT-2019-12428

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue is related to a SQL injection vulnerability in the /doorgets/app/requests/user/configurationRequest.php endpoint when the action parameter is set to network. This could allow a remote background...

PT-2019-12432

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue is related to a SQL injection vulnerability in the /doorgets/app/requests/user/emailingRequest.php file. A remote background administrator privilege user, or a user with permission to manage emailing,...

CVE-2019-11620: Improper Neutralization of Special Elements used in an SQL Command

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user or a user with permission to manage modulecategory could exploit the vulnerability to obtain database sensitive information via...

PT-2019-12420

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue is related to a SQL injection vulnerability located in the /doorgets/app/views/ajax/contactView.php file. This could allow a remote, normally registered user to exploit the vulnerability and obtain...

PT-2019-12426

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue is related to a SQL injection vulnerability in the /doorgets/app/requests/user/configurationRequest.php endpoint when the action parameter is set to analytics. This could allow a remote background...

SQL injection vulnerability in the background of Armitage CMS

JX CMS Jxcms is a website construction and management system independently developed by Taizhou JX Information Technology Co. A SQL injection vulnerability exists in the background of Jxcms. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Harbin Juyao Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Harbin Juyao Network Technology Co., Ltd. is mainly engaged in website construction, website promotion, micro letter operation, 400 telephone business. There is a SQL injection vulnerability in the website construction system of Harbin Juyao Network Technology Co. Attackers can use the...

Shanghai Danfan Network Technology Co., Ltd. station building system exists SQL injection vulnerability

Huaxia chemical network is by Shanghai Danfan network technology limited company founded, is for the chemical industry to provide security, high efficiency, multi-function, system supporting B2B electronic commerce platform of professional website. The Shanghai Danfan network science and technolo...

SQL Injection Vulnerability in dhcms Frontend

dhcms is an enterprise building system. A SQL injection vulnerability exists in the frontend of dhcms, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Vanno Enterprise Website Management System (CNVD-2019-12518)

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. VANOC enterprise website management system has SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Joomla Component iPhone homepage icon Parameter SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the iPhone homepage icon parameter of the Joomla component. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Ningbo Online Management System

Ningbo Online Online Management System is a website building system. SQL injection vulnerability exists in Ningbo Online Management System, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Acme CMS Backend vi***_ed***.php

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the background vied.php of Acme CMS, which can be exploited by attackers to obtain sensitive databas...