10214 matches found
Fushun Zhonglian Network Technology Co., Ltd. website building system has SQL injection vulnerabilities
Fushun Zhonglian Network Technology Co., Ltd. is engaged in software development, PC, mobile site construction and planning and promotion. WeChat, micro-official network development and application. Multimedia network, etc. Comprehensive network company. Fushun City, the United Network Technology...
CVE-2020-3462
A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could...
SpringBlade SQL Injection Vulnerability
SpringBlade is a set of microservices development platform. A SQL injection vulnerability exists in the DAO/DTO implementation in SpringBlade 2.7.1 and earlier versions. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An...
CentOS Web Panel SQL Injection Vulnerability (CNVD-2020-43613)
CentOS Web Panel CWP is a free web hosting control panel. A SQL injection vulnerability exists in the ajaxmailautoreply.php file in CentOS Web Panel cwp-e version 17.0.9.8.923, which originates from the program not properly validating a user-supplied string. An attacker could exploit this...
SQL Injection Vulnerability in the Website Building System of Luoyang Wanqian Network Technology Co.
Luoyang Wanqian Network Technology Co., Ltd. was founded in 2007, for the global large and small enterprises, groups and institutions, to provide high-quality website construction, network promotion, office automation management software development and use of network software services, now the...
SQL Injection Vulnerability in Website Building System of Luoyang City Wanqian Network Technology Co.
Luoyang Wanqian Network Technology Co., Ltd. was founded in 2007, for the global large and small enterprises, groups and institutions, to provide high-quality website construction, network promotion, office automation management software development and use of network software services, now the...
CVE-2020-10982
Gambio GX before 4.0.1.0 allows SQL Injection in admin/gvmail.php...
CVE-2020-15713
rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script using the sortBy parameter, which could allow the attacker to view, add, modify, or delete information in the back-end database...
BEESCMS suffers from SQL injection vulnerability (CNVD-2020-48930)
BEESCMS adopts PHP+MYSQL, featuring multi-language system and easy expansion of content modules. BEESCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL injection vulnerability in p***.php file of website building system of Anyang Zhidao Media Co.
Founded in 2011, Anyang Zhidao Media Co., Ltd. is a formal and professional Anyang network company engaged in Internet business and software development. Anyang Zhidao Media Co., Ltd. building system p.php file SQL injection vulnerability, attackers can use the vulnerability to obtain database...
SQL injection vulnerability in n***.php file of website building system of Anyang Zhidao Media Co.
Founded in 2011, Anyang Zhidao Media Co., Ltd. is a formal and professional Anyang network company engaged in Internet business and software development. Anyang Zhidao Media Co., Ltd. building system n.php file SQL injection vulnerability, attackers can use the vulnerability to obtain database...
SQL Injection Vulnerability in Anshan Guangwu Network Technology Co.
Anshan Guangwu Network Technology Co., Ltd. mainly provides website production and hosting maintenance, domain name registration services and network marketing and promotion programs. Anshan Guangwu Network Technology Co., Ltd. website building system SQL injection vulnerability, attackers can us...
LibreNMS SQL Injection Vulnerability (CNVD-2020-41858)
LibreNMS is an open source network monitoring system based on PHP and MySQL. The system features customizable alerts , auto-discovery of the network environment and automatic updates . A SQL injection vulnerability exists in LibreNMS versions prior to 1.65.1. The vulnerability stems from a lack o...
SQL Injection Vulnerability in One-Card Consumption Management System of Anhui Kexun Education Equipment Group Co.
Anhui Kexun Education Equipment Group Co., Ltd. is a professional information technology integrated service provider specializing in computer software research and development, sales and service. There is a SQL injection vulnerability in the One Card Consumption Management System of Anhui Kexun...
SQL Injection Vulnerability in Intelligent Grain Storage Management System of Aisino Corporation Ltd.
Aisino Corporation is a high-tech enterprise with modernized enterprise management mechanism integrating technology, industry and trade. There is a SQL injection vulnerability in the intelligent grain depot management system of Aisino Corporation, which can be exploited by attackers to obtain...
CVE-2020-15052
An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...
SQL Injection Vulnerability in YzmCMS Backend or***.cl***.php
YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A SQL injection vulnerability exists in YzmCMS backend or.cl.php. Attackers can use the vulnerability to obtain sensitive information ...
SQL Injection Vulnerability in ejucms Backend
EJU real estate system ejucms is a set of localized O2O real estate website platform system. ejucms background SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...
ZZCMS suffers from SQL injection vulnerability
ZZCMS is a content management system for Merchants Network. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2020-3468
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values within SQL...