Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-08337)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-08348)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM 7.0.0...

Multiple vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. SQL injection in the application "Address" CWE-89 - CVE-2018-0530 Operation restriction bypass in the "Folder settings" CWE-264 - CVE-2018-0531 Operation restriction bypass in the setting of Login...

Multiple SQL Injection Vulnerabilities in GxlcmsQY System

GxlcmsQY system is a simple program tailored for business users. GxlcmsQY System has multiple SQL injection vulnerabilities. An attacker can exploit the vulnerabilities to obtain sensitive database information...

Web Security Dog (IIS Version) V4.0 suffers from SQL Injection Vulnerability

Website Security Dog IIS Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features for comprehensive website security. Website Security Dog IIS Edition V4.0 suffers from a SQL injection vulnerability. An...

PT-2018-18966 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: zzcms version 8.2 Description: The issue allows SQL injection via the id parameter in a "dl/dl sendsms.php" request. Recommendations: For zzcms version 8.2, avoid using the id parameter in the "dl/dl sendsms.php" request until the issue is...

CVE-2018-8967

An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in an adv2.php?action=modify request...

SQL Injection Vulnerability in ZZCMS /admin/logincheck.php File

Webmaster Merchants Content Management System ZZCMS developed by the ZZCMS team, into the database optimization, content caching, AJAX and other technologies, open source, independent functional modules, to facilitate secondary development. ZZCMS /admin/logincheck.php file SQL injection...

NiuShop B2C Single Merchant Mall System suffers from SQL Injection Vulnerability

NiuShop B2C single merchant mall system is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2C single merchant mall system SQl injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Website Building System of Tian Xun Network Technology Co.

Tianxun Network Technology Co., Ltd. is a professional enterprise engaged in Internet services, focusing on corporate website planning and construction, WeChat public platform development, website optimization, online store decoration, online store operation, promotion account hosting services...

SQL Injection Vulnerability in the Website Building System of Tai'an Star Network Technology Co.

Tai'an Star Networks Co., Ltd. is a website construction, website promotion, Internet marketing, 400 free phone calls and other businesses, with Internet technology as the core of the high-tech enterprises. Taian Star Network Technology Co., Ltd. station building system there are SQL injection...

CVE-2018-6843

Kentico 10 before 10.0.50 and 11 before 11.0.3 has SQL injection in the administration interface...

UBUNTU-CVE-2018-7033

SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD...

CVE-2018-6229

A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system...

Afian FileRun SQL Injection Vulnerability (CNVD-2018-06552)

Afian FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A SQL injection vulnerability exists in Afian FileRun versions prior to 2018.02.13. A remote attacker can exploit the vulnerability to execute SQL commands with the help of...

Alexandria Book Library component SQL injection vulnerability in Joomla!

Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other features . Alexandria Book Library component is used in one of the data management components . A SQL injection vulnerability exists in...

YxtCMF SQL Injection Vulnerability

YxtCMF is an online learning system. The system has functions such as online live broadcast, online question and answer, teacher management and forum. A SQL injection vulnerability exists in the ShitiController.class.php file in YxtCMF version 3.1. A remote attacker can exploit this vulnerability...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

YXCMS has multiple vulnerabilities

Yxcms is an enterprise building system based on PHP and mysql technology. Yxcms 1.4.6 version exists stored XSS, arbitrary file deletion, file write, SQL injection vulnerability, attackers can exploit the vulnerability to obtain control of the web server...

SQL Injection Vulnerability in BEESCMS Frontend member.php and order_save.php Pages

BEESCMS is an enterprise website management system based on PHP+Mysql architecture. A SQL injection vulnerability exists in the BEESCMS frontend member.php and ordersave.php pages. An attacker can exploit the vulnerability to obtain sensitive database information...