S-CMS SQL Injection Vulnerability (NVD-C-2018-125521)

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. The search.php in S-CMS 1.5 has a SQL injection vulnerability, which can be exploited by an attacker through the keyword parameter to perform a SQL injecti...

Centreon SQL Injection Vulnerability (CNVD-2019-00829)

Centreon formerly known as Merethis Centreon is an open source IT monitoring software suite from Centreon France that needs to be paired with Nagios to manage Nagios via the web and third-party components to enable monitoring of networks, operating systems and applications. A SQL injection...

SQL Injection Vulnerability in DaCong Network Technology Company's Website Building System

DaCong Network Technology Inc. is an Internet technology service company. A SQL injection vulnerability exists in the website building system of DaCong Network Technology Company. An attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2018-19349

In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...

CVE-2018-19331

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

CVE-2018-18755

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update usergroupid parameter or the admin/user/user/update userid parameter...

CVE-2018-0685

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search...

TouchNet universal mall station building system free version v20181107 foreground SQL injection vulnerability

TouchNet universal mall station-building system is a set of universal station-building system developed by Tianjin TouchNet Technology Co. TouchNet universal mall station building system free version v20181107 SQL injection vulnerability exists in the foreground, an attacker can use the...

WP GDPR Compliance <= 1.4.2 - Unauthenticated Call Any Action or Update Any Option

The plugin WP GDPR Compliance allows unauthenticated users to execute any action and to update any database value. If the request data form is available for unauthenticated users, even unauthenticated users are able to do this. See references for discussion of the issue. The problem is in the fil...

DedeCMS SQL Injection Vulnerability (CNVD-2019-07021)

Desdev DedeCMS Dream Weaving Content Management System is China's Zhuozhuo network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. A SQL injection vulnerability exis...

SQL Injection Vulnerability in OURPHP 1.8.3

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OURPHP1.8.3 version of the SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

CVE-2018-18949

Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...

PhpTpoint Hospital Management System SQL Injection Vulnerability (CNVD-2019-23086)

PhpTpoint Hospital Management System is a hospital management system developed using PHP language. The system includes functions such as doctor management, patient management and online appointment booking. A SQL injection vulnerability exists in PhpTpoint Hospital Management System, which can be...

CVE-2016-10731

ProjectSend formerly cFTP r582 allows SQL injection via manage-files.php with the request parameter status, manage-files.php with the request parameter files, clients.php with the request parameter selectedclients, clients.php with the request parameter status, process-zip-download.php with the...

PHPSHE B2C Mall System V1.7 SQL Injection Vulnerability in Background

PHPSHE B2C mall system is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. PHPSHE B2C Mall System V1.7 has a SQL injection vulnerability in the background. An attacker can exploit the vulnerability to obtain sensitive database...

SQL Injection Vulnerability in the Website Publishing Cloud Platform of Beijing Kai Pu Internet Technology Co.

Ltd. is a provider of content management cloud computing solutions and services. A SQL injection vulnerability exists in the website publishing cloud platform of Beijing Kai Pu Internet Technology Co. An attacker can exploit the vulnerability to obtain sensitive information from the database...

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

SQL Injection Vulnerability in V1***.php file of YunYu CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. There is a SQL injection vulnerability in the file V1.php of YUNUCMS enterprise website management system. An attacker can exploit the...

Gxlcms SQL Injection Vulnerability (CNVD-2018-21608)

Gxlcms is an enterprise website creation system. A SQL injection vulnerability exists in the \lib\admin\action\dataaction.class.php file in Gxlcms version 2.0. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the 'ids' parameter...

foreman: SQL injection due to improper handling of the widget id parameter

An input sanitization flaw was found in the id field of the dashboard controller. A user could use this flaw to perform a SQL injection attack on the back-end database...