Longcheng Internet Wenzhou Network Company website building system SQL injection vulnerabilities

Wenzhou Longcheng Internet Technology Co., Ltd - is a professional engaged in website construction, website production, website design, graphic design, website optimization, website promotion, album design and other integrated Internet companies. Long Cheng Internet Wenzhou Network Company websit...

CVE-2017-10937

SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

PT-2018-5304

Name of the Vulnerable Software and Affected Versions ZTE ZXCDN-SNS versions prior to V4.01.01 Description The issue allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information. Recommendations For versions prior to...

PT-2018-5305

Name of the Vulnerable Software and Affected Versions ZTE ZXIPTV-UCM versions prior to V2.01.05.09 Description The issue allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information. Recommendations For versions prior to...

CVE-2018-14579

GolemCMS through 2008-12-24, if the install/ directory remains active after an installation, allows remote attackers to execute arbitrary PHP code by inserting this code into the "Database Information" "Table prefix" form field, or obtain sensitive information via a direct request for...

PT-2018-12589

Name of the Vulnerable Software and Affected Versions GolemCMS through 2008-12-24 Description The issue allows remote attackers to execute arbitrary PHP code by inserting this code into the Table prefix form field in the "Database Information" section, or obtain sensitive information via a direct...

YUNUCMS v1.1.1 D***.php page has SQL injection vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS v1.1.1 version of the D.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

SQL Injection Vulnerability in Shenzhen PointClear Information Technology PointClear MIS Management Information System

PointClear MIS Management Information System is an enterprise-level instant messaging platform launched by PointClear. Shenzhen PointClear Information Technology PointClear MIS Management Information System suffers from SQL injection vulnerability, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in South Data's Website Building System

Southern Data, is a high-tech enterprise mainly engaged in the development, sales and service of network software and other businesses. Southern Data's website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

PT-2018-11509

Name of the Vulnerable Software and Affected Versions SoftExpert Excellence Suite version 2.0 Description A SQL injection issue allows remote authenticated users to perform SQL heuristics by pulling information from the database. This is achieved by manipulating the cddocument parameter in the...

NUCMS V1.1 SQL Injection Vulnerability in Backend

NUCMS content management system is an open source website management system. NUCMS V1.1 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in ESPCMS Enterprise Website Management System V6.7.17.08.07 sh***.php Page

ESPCMS enterprise website management system is based on LAMP development and construction of enterprise website management system. ESSENCE ESPCMS Enterprise Website Management System V6.7.17.08.07 SQL injection vulnerability exists in the sh.php page. An attacker can exploit the vulnerability to...

SQL Injection Vulnerability in PHPMyWind

HPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . There is a SQL injection vulnerability in PHPMyWind, which can be exploited by attackers to obtain sensitive information in the database, resulting in information leakage and operational security risks...

WordPress Ultimate Form Builder Lite Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Ultimate Form Builder Lite plugin, which can be exploited by an attacke...

Multiple SQL Injection Vulnerabilities in WordPress WP Google Map Plugin

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Multiple SQL injection vulnerabilities exist in the WordPress WP Google Map plugin, which can be exploited by attackers to...

SQL Injection Vulnerability in Guangzhou Benying Computer Technology Co.

Founded in 2007, Guangzhou Benying Computer Technology Co., Ltd. is a leading mobile Internet technology service provider in Guangzhou. Committed to building Internet + business ecology, especially focusing on the field of mobile Internet, providing APP development, system development, small...

Zechat has multiple vulnerabilities

Zechat is a PHP-based online chat application script . Zechat suffers from SQL injection and cross-site request forgery vulnerabilities. An attacker can exploit the vulnerabilities to obtain sensitive information about the database; change the user's information...

NewsBee CMS 'home-text-edit.php' SQL Injection Vulnerability (CNVD-2018-18806)

NewsBee CMS is a news website CMS Content Management System. A SQL injection vulnerability exists in NewsBee CMS 'home-text-edit.php'. An attacker can exploit the vulnerability to obtain sensitive database information...