SQL Injection Vulnerability in 'RingType' Parameter of BusinessEase CMS

Shangyi CMS, or 31cms for short, is a drop-in microsoft public platform management system. A SQL injection vulnerability exists in Business Easy CMS. The lack of filtering of the 'RingType' parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in phpwechat wechatmanage.class.php

phpwechat is a simple framework for building a PC website + wechat public platform. phpwechat wechatmanage.class.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information using commonly used SQL injection tools...

MC Smart Shop SQL Injection Vulnerability

MC Smart Shop is a PHP script to manage multi-purpose categorization of products. MC Smart Shop suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive data...

My Php Dating 'id' Parameter SQL Injection Vulnerability

My Php Dating 2.0 is an online dating site system. The My Php Dating 'id' parameter SQL injection vulnerability can be exploited by attackers to access or modify database data...

Joomla! aWeb Cart Watching System for Virtuemart Extension SQL Injection Vulnerability

Joomla! is an open source content management system CMS developed by the Open Source Matters team in the United States , the system provides RSS feeds , site search and other features . aWeb Cart Watching System for Virtuemart is one of the extensions used to collect unfilled orders . A SQL...

SQL Injection Vulnerability in Social Information Collection Platform-Hotel Information Management System of Beijing Aerospace Golden Shield Technology Co.

Beijing Aerospace Golden Shield Technology Hotel Information Management System is a set of hotel management software. Beijing Aerospace Golden Shield Science and Technology Co., Ltd. social information collection platform - hotel information management system...

Component realtyna SQL Injection Vulnerability in Joomla!

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component realtyna, which allows remote attackers to execute arbitrary SQL commands with the help of the pid parameter in the comrpl operation of index.php...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System Login.php

Shield Spirit public number promotion system is mainly applied to public number promotion affiliate. A SQL injection vulnerability exists in the login.php of the Shield Spirit public number promotion system. Since the username variable in the statement gets data directly from post, it allows...

UBUNTU-CVE-2016-9864

An issue was discovered in phpMyAdmin. With a crafted username or a table name, it was possible to inject SQL statements in the tracking functionality that would run with the privileges of the control user. This gives read and write access to the tables of the configuration storage database, and ...

SQL Injection Vulnerability in Zzcms admin/logincheck.php Page

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the zzcms admin/logincheck.php page. Due to the failure to filter variables coming from $SERVER, an attacker can exploit the vulnerability to obtain sensitive database data...

Jinan Minsoo Information Technology Co., Ltd. website building system has multiple SQL injection vulnerabilities

Jinan Minsoo Information Technology Co. Jinan Minsoo Information Technology Co., Ltd. building system newDetail page id parameter and index page pageId parameter are SQL injection vulnerability, attackers use the loophole to obtain sensitive information in the database, constituting information...

Wordpress Olimometer Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . WordPress plugin Olimometer version 2.56 and previous versions olimometerid parameter has a SQL injection...

MyBB has multiple vulnerabilities (CNVD-2016-11626)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. Multiple security vulnerabilities exist in versions of MyBB prior to 1.8.8 including: SQL injectio...

MyBB has multiple vulnerabilities (CNVD-2016-11599)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. Multiple security vulnerabilities exist in versions of MyBB prior to 1.8.7, including: SQL injecti...

Wordpress Sirv plugin SQL injection vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A SQL injection vulnerability exists in the rowid parameter of the admin-ajax.php page of Wordpress plugin Sirv...

Unspecified SQL Injection Vulnerability in TYPO3 Shibboleth Authentication Extension

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. An unspecified SQL injection vulnerability exists in the TYPO3 Shibboleth Authentication extension, which could allow an attacker to take control of an application, access or modify data, or explo...

SQL injection vulnerability in hdwiki doc.class.php page

Interactive Wiki open source system HDwiki as China's first independent intellectual property rights of the Chinese Wiki Wiki system. SQL injection vulnerability exists in hdwiki doc.class.php page, allowing attackers to exploit the vulnerability to directly manipulate the website database and...

SQL Injection Vulnerability in Penta Digital Campus System folder Parameter

Penta Digital Campus System is using the technology platform of .NET+SqlServer. A SQL injection vulnerability exists in the /BG/Mail/UMessageView.aspx page of Pangda Digital Campus System. The lack of filtering of the 'folder' parameter allows an attacker to exploit the vulnerability to obtain...

SQL Injection Vulnerability in type=Detail&FileId Parameter of Penta Digital Campus System

Penta Digital Campus System is using the technology platform of .NET+SqlServer. A SQL injection vulnerability exists in the /BG/GRBG/FileManage/FileUPload.aspx page of Pangda Digital Campus System. The lack of filtering of the 'id' parameter allows an attacker to exploit the vulnerability to obta...

Exponent CMS 'username' Parameter SQL Injection Vulnerability

Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS...