10214 matches found
SQL Injection Vulnerability in Heybbs Backend ad***_ad***_no***.php Page
Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background adadno.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
Changsha Tianxin District Bin.com Network Technology Service Department's Website Building System Exists SQL Injection Vulnerabilities
Changsha Tianxin District Binnet Network Technology Service Department is a company engaged in corporate website construction, website promotion and other projects. Changsha Tianxin District Bin.com Network Technical Services Department website building system has a SQL injection vulnerability,...
CVE-2020-3936
UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command...
PbootCMS Enterprise Web Development and Construction Management System suffers from SQL Injection Vulnerability
PbootCMS is a new core permanent open source free PHP web development and building management system CMS developed by Avantech. PbootCMS enterprise website development and construction management system has a SQL injection vulnerability that can be exploited by remote attackers to submit special...
CVE-2020-9521
An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation SMA, affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being...
SQL Injection Vulnerability in PHPSHE
PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE has a SQL injection vulnerability, which ca...
CVE-2019-20574
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the Wi-Fi history Content Provider. The Samsung ID is SVE-2019-14061 August 2019...
SQL Injection Vulnerability in Jinwei Supermarket Cashiering
Jinwei supermarket cash register designed for small and medium-sized supermarkets and community convenience stores to scan the code cash register tools, merchants can use an ordinary computer with Internet access with the code scanning gun to achieve the main functions of the supermarket cash...
DEBIAN-CVE-2020-10802
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...
PT-2020-10037 · Cloud Native Computing Foundation +1 · Harbor +1
Name of the Vulnerable Software and Affected Versions: Cloud Native Computing Foundation Harbor versions prior to 1.8.6 and 1.9.3 Description: The issue allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform. This is a result of a flaw in the Cloud...
SQL injection vulnerability in the al***.cl***.php file of the UQCMS cloud commerce system
UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system al.cl.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database...
ShopsN open source mall system SQL injection vulnerability
ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd. an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system . ShopsN open source mall system SQL injection vulnerability , attackers can us...
SQL injection vulnerability in the pa*** parameter of the ru***.php page of the website building system of Huaihua Fifth Element Network Information Company Limited (CNVD-2020-26552)
Huaihua Fifth Element Network Information Co., Ltd. is an Internet + application services company, Internet technology, marketing, operations, big data analysis, cloud computing applications as the core, to carry out the Internet + industrial integration operation and development. Huaihua Fifth...
Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2020-18399)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM...
UBUNTU-CVE-2020-10380
RMySQL through 0.10.19 allows SQL Injection...
SQL Injection Vulnerability in Microcontrol Smart Cafeteria Management System of Shenzhen Microcontrol One Finger Technology Co.
Shenzhen Micro-control One Finger Technology is a value-integrated enterprise that aspires to biometrics technology research as well as applied product development, production, consulting, sales and service. Shenzhen Micro-control One Finger Technology Co., Ltd Micro-control Smart Cafeteria...
Joomla! component com_newsfeeds 'feedid' SQL injection vulnerability
Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in the Joomla! component comnewsfeeds 'feedid'. An attacker can exploit this vulnerability to execute illegal SQL commands...
Shanghai Yiso Network Technology Co., Ltd. ShopsN open source mall system v3.0.0 aj*** function there are SQL injection vulnerabilities
ShopsN open source mall system is a product of Shanghai Yisu Network Technology Co. Ltd. ShopsN open source mall system v3.0.0 aj function there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...
SQL Injection Vulnerability in Guangzhou Sanjin Network Technology Co.
Guangzhou Sanjin Network Technology Co., Ltd. company is a high-tech technology enterprises in Guangdong Province was founded in May 2014, is the enterprise WeChat distribution platform, website construction service providers. Guangzhou Sanjin Network Technology Co., Ltd. website building system...