10214 matches found
Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-01643)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. An SQL injection vulnerability exists in the...
SQL Injection Vulnerability in MacCMS Version 8.x
MacCMS program is a fast shadow video building system that runs on PHP+MYSQL environment. A frontend SQL injection vulnerability exists in MacCMS version 8.x 2017-06-20, which can be exploited by attackers to obtain sensitive database information...
SQL injection vulnerability in the bill.class.php page of UQCMS Cloud Business B2B2C Multi-store System
UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. A SQL injection vulnerability exists in the bill.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System due to the program's failure to adequately filte...
CVE-2017-16733
A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identified, which an attacker can leverage to disclose sensitive information from the database...
Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37631)
Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability exists in the handling of GET method requests in versions of Quest NetVault Backup prior to 11.4.5, which stems from the program failing to properly detect user-submitted strings prior...
Bus Booking Script SQL Injection Vulnerability
Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script version 1.0. The vulnerability can be exploited to inject SQL commands by sending the 'txtname' parameter to the admin/index.php file...
FS Foodpanda Clone SQL Injection Vulnerability
FS Foodpanda Clone is a set of online food trading website scripts written using the PHP CodeIgniter framework. A SQL injection vulnerability exists in FS Foodpanda Clone version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...
PHP Scripts Mall E-commerce MLM Software SQL Injection Vulnerability
PHP Scripts Mall E-commerce MLM Software is a PHP based e-commerce online marketing system from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall E-commerce MLM Software version 1.0. A remote attacker can inject SQL into the PHP Scripts Mall E-commerce MLM Software...
PHP Scripts Mall Entrepreneur Job Portal Script SQL Injection Vulnerability
PHP Scripts Mall Entrepreneur Job Portal Script is a set of PHP based recruitment, job search website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Entrepreneur Job Portal Script version 2.0.6. The vulnerability can be exploited by remote attackers to...
PHP Scripts Mall Child Care Script SQL Injection Vulnerability
PHP Scripts Mall Child Care Script is a PHP based daycare, kindergarten online management, booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Child Care Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'city'...
PHP Scripts Mall Facebook Clone Script SQL Injection Vulnerability
PHP Scripts Mall Facebook Clone Script is a set of PHP based social networking site scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Facebook Clone Script version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sendi...
FS Crowdfunding Script SQL Injection Vulnerability
FS Crowdfunding Script is a set of scripts for online crowdfunding websites based on PHP and MySQL. A SQL injection vulnerability exists in FS Crowdfunding Script version 1.0. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the latestnewsdetails.php file to inject...
FS Freelancer Clone SQL Injection Vulnerability
FS Freelancer Clone is a set of PHP and MySQL based scripts for freelancer online job search and recruitment websites. A SQL injection vulnerability exists in FS Freelancer Clone version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'u' paramete...
PHP Scripts Mall Advance Online Learning Management Script SQL Injection Vulnerability
PHP Scripts Mall Advance Online Learning Management Script is a set of PHP based online learning scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Advance Online Learning Management Script version 3.1. A remote attacker can exploit the vulnerability by...
FS Grubhub Clone SQL Injection Vulnerability
FS Grubhub Clone is a set of PHP-based scripts for online food ordering websites. A SQL injection vulnerability exists in FS Grubhub Clone version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...
PHP Scripts Mall Basic B2B Script SQL Injection Vulnerability
PHP Scripts Mall Basic B2B Script is a set of PHP-based B2B2 business-to-business transactional website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Basic B2B Script version 2.0.8. A remote attacker can exploit the vulnerability by sending the 'id'...
DomainSale PHP Script SQL Injection Vulnerability
DomainSale PHP Script is a set of scripts for online domain name selling websites based on PHP and MySQL. A SQL injection vulnerability exists in DomainSale PHP Script version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'id' parameter to the...
CVE-2017-5663
In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with client/loan/center/staff/group read permissions is able to inject malicious SQL into SELECT queries. The 'sqlSearch' parameter on a number of endpoints is not sanitized and appended directly to...
Joomla JBuildozer Component SQL Injection Vulnerability
Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search, etc. JBuildozer extension is used in one of the Joomla! Joomla JBuildozer component SQL injection vulnerability. A remote attacker can exploit this...