10214 matches found
SQL Injection Vulnerability in Interview Module of State Micro CMS School Crowd System
State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system interview module SQL injection vulnerability. Attackers can use the vulnerability to obtain...
CVE-2018-14501
manager/adminajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "mid=1 AND SLEEP5" substring...
SQL Injection Vulnerability in V1.7 Backend of School Worry-free Enterprise Building System
School carefree enterprise website system Xiao5uCompany is a set of company and enterprise-oriented website building system. SQL injection vulnerability exists in the background of XiaowuCompany V1.7. An attacker can exploit the vulnerability to obtain sensitive information from the database...
CVE-2018-14389
joyplus-cms 1.6.0 has SQL Injection via the manager/adminajax.php val parameter...
SQL Injection Vulnerability in South Data's Website Building System
Southern Data, is a high-tech enterprise mainly engaged in the development, sales and service of network software and other businesses. Southern Data's website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL injection vulnerability in Quick Help Cloud enterprise website building system
Quick Help Cloud is a high-quality intellectual property and enterprise information service platform, providing enterprise trademark registration, high-tech enterprise certification, patent application, copyright registration and other intellectual property services. Quick Help Cloud enterprise...
CVE-2018-14012
WolfSight CMS 3.2 allows SQL injection via the PATHINFO to the default URI...
Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-13454)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in the product/card.php...
UBUNTU-CVE-2018-13450
SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...
UBUNTU-CVE-2018-13447
SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...
SQL Injection Vulnerability in Hop-Up Website Building System
Hop-Up Networks specializes in providing online business solutions to clients in the information technology field. A SQL injection vulnerability exists in the website building system of HopYoung Networks, which can be exploited by attackers to obtain sensitive information from the database...
Dialogic PowerMedia XMS SQL Injection Vulnerability
Dialogic PowerMedia XMS is a suite of software multimedia servers for real-time communications from Dialogic, Inc. that provide real-time multimedia communication solutions for IMS, MRF, enterprise and WebRTC applications. A SQL injection vulnerability exists in the management console in Dialogic...
CVE-2018-7774
The vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the username input parameter...
CVE-2018-7765
The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter...
Cybozu Garoon vulnerable to SQL injection
Overview Cybozu Garoon provided by Cybozu, Inc. contains an SQL injection vulnerability CWE-89 in application "Notifications". Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under the Information Security...
CVE-2018-11589
Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php, the chartId parameter in ExportCSVServiceData.php, the searchCurve parameter in listComponentTemplates.php, or the...
ConnX ESP HR Management SQL Injection Vulnerability
ConnX ESP HR Management is a modular web-based HR management solution from ConnX Australia. A SQL injection vulnerability exists in ConnX ESP HR Management version 4.4.0. The vulnerability can be exploited by a remote attacker to execute arbitrary SQL commands by sending the...
CVE-2018-10997
Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword...