SQL Injection Vulnerability in xycms edit_book.php Page id Parameter

XYCMS was formerly known as Nanjing XYCMS Enterprise Building System. After XYCMS editbook.php page id parameter exists SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in youdiancms CustomerAction.class.php

Friendpoint Enterprise Website Management System is a solution. A SQL injection vulnerability exists in youdiancms CustomerAction.class.php. Allows attackers to exploit the vulnerability to gain access to sensitive database information...

SQL Injection Vulnerability in the Backend of Armitage Website Management System

Jingxun CMS is a website construction and management system by Taizhou Jingxun Information Technology Co. A SQL injection vulnerability exists in the backend of the 2.1 Simplified Chinese version of the Armitage CMS, due to the system not filtering the $attachment parameter. This vulnerability...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.(CNVD-2016-06020)

Fuzhou Tranda Electronics Co., Ltd. is a high-tech enterprise specializing in software development, system integration, security services and other computer information services. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system is a data information management...

ManageEngine ServiceDesk Plus 'CreateReportTable.jsp' SQL Injection Vulnerability

ServiceDesk Plus is web-based helpdesk software that helps users manage all their communications from a single point. ManageEngine ServiceDesk Plus 'CreateReportTable.jsp' has a SQL injection vulnerability due to the program failing to adequately filter user-supplied data before using it in SQL...