10214 matches found
CVE-2018-5981
SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...
CVE-2017-15329
Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module. An attacker logs in to the system as a common user and sends crafted HTTP requests that contain malicious SQL statements to the affected system. Due to a lack of input validation on HTTP requests tha...
Website Security Dog suffers from SQL Injection Vulnerability
Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. Website Security Dog suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
CVE-2018-3603
A CGGIServlet SQL injection remote code execution RCE vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...
CVE-2017-17415
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Count method requests. The issue resul...
CVE-2017-17423
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupSegment Get method requests. The issue resul...
CVE-2017-17420
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobCountHistory Get method requests. The issue...
CVE-2017-17413
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupTargetSet Get method requests. The issue...
CVE-2017-17425
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSourceDeviceSet Get method requests. The issue...
CVE-2018-0120
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct an SQL injection attack against an affected system. The vulnerability exists because the affected software fails to validate user-supplied input in certain SQL...
JSP Tickets SQL Injection Vulnerability in Joomla!
Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other functions . JSP Tickets component is used in which a set of ticket system components. A SQL injection vulnerability exists in version 1.1...
CP Event Calendar SQL Injection Vulnerability in Joomla!
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. CP Event Calendar is one of the event calendar plugin . A SQL injection vulnerability exists in Joomla! CP Event Calendar version 3.0.1. A remote...
SQL Injection Vulnerability in API Interface of Top Internship Management Platform of Wuhan Xinhongbo Technology Co.
Top Internship Management Platform is a management platform launched by Wuhan Xinhongbo Technology Co., Ltd. which can manage and monitor the top internship process of students in a comprehensive and intuitive way. There is a SQL injection vulnerability in the API interface of Wuhan Xinhongbo...
PT-2018-17528 · Sangoma · Freepbx
Name of the Vulnerable Software and Affected Versions: FreePBX versions 10.13.66-32bit and 14.0.1.24 SNG7-PBX-64bit-1712-2 Description: The issue allows post-authentication SQL injection via the order parameter. It is noted that the vendor disputes this issue, stating it is intentional for users ...
SQL Injection Vulnerability in zzcms 8.2 user/del.php File
zzcms is an enterprise website builder program It is an enterprise website builder program. zzcms 8.2 version user/del.php file SQL injection vulnerability, attackers can exploit the vulnerability to access or modify the database data...
Zechat SQL Injection Vulnerability
Zechat is a PHP-based online chat application script . A SQL injection vulnerability exists in Zechat version 1.5. A remote attacker can exploit this vulnerability to inject SQL commands...
Flexible Poll SQL Injection Vulnerability
Flexible Poll is a dynamic online poll management system. A SQL injection vulnerability exists in Flexible Poll version 1.2. A remote attacker can inject SQL commands by sending the 'id' parameter to the index.php or mobilepreview.php file...
CVE-2018-5443
A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.220170817. WebAccess/SCADA does not properly sanitize its inputs for SQL commands...
SQL Injection Vulnerability in XiaoCMS Backend Database.php Page
Based on PHP+Mysql architecture, XiaoCms Enterprise Builder is a small, flexible, simple and easy-to-use lightweight cms. A SQL injection vulnerability exists in the database.php page of XiaoCMS backend. An attacker can exploit this vulnerability to obtain sensitive information from the database...