SQL Injection Vulnerability in fangmail Mail System

FangMail email system adopts distributed system architecture and built-in fourth-generation anti-spam gateway based on cloud technology. A SQL injection vulnerability exists in fangmail mail system. The lack of filtering of the 'username' parameter allows attackers to exploit the vulnerability to...

CVE-2016-8582

A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOADFILE...

CVE-2016-8582: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOADFILE...

PT-2016-7511

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM and USM versions prior to 5.3.2 Description A vulnerability exists that allows an attacker to execute an arbitrary SQL query, potentially leading to the retrieval of database information or the reading of local system files vi...

SQL Injection Vulnerability in the queryInvcl Method of the UFIDA UFO System

UFIDA UFO system is UFIDA software comes with tabular data processing software. A SQL injection vulnerability exists in the queryInvcl method of UFIDA UFO System. An attacker is allowed to exploit the vulnerability to obtain database information...

SQL Injection Vulnerability in UFIDA UFO System queryByWhere Interface

UFIDA UFO system is UFIDA software comes with tabular data processing software. A SQL injection vulnerability exists in the queryByWhere interface of UFIDA UFO System. An attacker is allowed to exploit the vulnerability to obtain database information...

SQL Injection Vulnerability in SERVER Variables of Tongda OA Education Edition

Tongda OA Education Edition is a set of digital campus software for the education industry developed on the basis of Tongda OA2013 Enhanced Edition, whose distinctive feature is that it integrates school website, collaborative office, instant messaging, cyberspace and mobile office. There is a SQ...

CVE-2016-5432

The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization RHEV Engine 4.0 allows local users to obtain sensitive database provisioning information by reading log files...

IMALL E-commerce Management System of Xiamen Techflood Software Co.

IMALL is an e-commerce management system of Xiamen Techflood Software Co. A design vulnerability exists in the IMALL e-commerce management system of Xiamen Techflood Software Co. An attacker can exploit the vulnerability to obtain database information and delete any order data in the database...

3Webs CMS SQL Injection Vulnerability

3Webs CMS is a content management system. 3Webs CMS suffers from a SQL injection vulnerability that can be exploited by an attacker via a SQL injection command, resulting in the disclosure of database information...

Contrexx CMS GOV Module OnlineDesk SQL Injection Vulnerability

Contrexx is an open source content management system. A SQL injection vulnerability exists in the Contrexx CMS GOV module OnlineDesk, which can be exploited by an attacker to transfer the Id parameter of the egov module to the database, resulting in the disclosure of database information...

MyBB SQL Injection Vulnerability (CNVD-2016-08094)

MyBB is based on PHP MySQL build , powerful , efficient open source forum system . MyBB SQL injection vulnerability , allowing attackers to exploit the vulnerability to obtain sensitive database information...

PHPCMS V9 ipbanned.php file SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 ipbanned.php file, which allows attackers to exploit the vulnerability to...

PHPCMS V9 badword.php file SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 badword.php file, which allows attackers to exploit the vulnerability to...

PHPCMS V9 member_group.php file SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 membergroup.php file, which allows attackers to exploit the vulnerability t...

PHPCMS V9 urlrule.php file SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 urlrule.php file, which allows attackers to exploit the vulnerability to...

PageAdminCMS SQL Injection Vulnerability

PageAdmin site management system CMS is . NET development of a support for multi-site, multi-language, integrated content distribution, information distribution, custom forms, custom models, membership systems, business management and other functions in one of the independent site management syst...

SQL Injection Vulnerability in UFIDA Financials /target/services/operOriztion?wsdl Page

UFIDA Financials is a financial management software. A SQL injection vulnerability exists in the UFIDA Financial System /target/services/operOriztion?wsdl page. An attacker can exploit the vulnerability to obtain database information...

SQL Injection Vulnerability in UFIDA Financials /target/services/userInfoWeb?wsdl Page

UFIDA Financials is a financial management software. A SQL injection vulnerability exists in the UFIDA Financial System /target/services/userInfoWeb?wsdl page. An attacker can exploit the vulnerability to obtain database information...

Arbitrary File Containment Vulnerability in UFIDA Financials

UFIDA Financials is a financial management software. UFIDA Financial System has an arbitrary file inclusion vulnerability. The vulnerability url is: http://target/TaskManager/TaskServiceServlet?m=1&taskname=... /... /WEB-INF/web.xml%00, attackers can use the vulnerability to obtain database...