Exponent CMS 'username' Parameter SQL Injection Vulnerability

Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS...

Exponent CMS 'version' Parameter SQL Injection Vulnerability

Exponent CMS is a free, open source PHP-based modular content management system CMS of the American OIC group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS version 2.3.9 suffers fro...

SQL Injection Vulnerability in Digital China Internet Behavior Management System Announce_Num Parameter

Digital China Internet Behavior Management System is an Internet behavior logging system that fully owns the network behavior analysis management system, integrating hardware and software architecture, behavior analysis engine, management and control policies, analyzing network activities in real...

SQL Injection Vulnerability in ShoweditField Function of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. A SQL injection vulnerability exists in the showeditField function of the Tibco Call Center System. Vulnerability file: /userweb/php/index/fieldConfig.class.php, exploit: UNIO...

SQL Injection Vulnerability in ECSHOP 3.0 category.php

ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. ECSHOP 3.0 version category.php SQL injection...

SQL Injection Vulnerability in InputStream Parameter of VOA (Pengwei) System

Shenzhen Pengwei Information Technology Co., Ltd VOA collaborative office platform is a kind of asp development OA system. VOA Pengwei system InputStream parameter exists SQL injection vulnerability, the vulnerability URL is...

SQL Injection Vulnerability in the ywonlyflag Parameter of VOA (Pengwei) System

Shenzhen Pengwei Information Technology Co., Ltd VOA collaborative office platform is a kind of asp development OA system. VOA Pengwei system ywonlyflag parameter exists SQL injection vulnerability, the vulnerability URL is...

CVE-2016-1000116

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

SQL injection vulnerability in mallbuilder background admin/index.php page

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. A SQL injection vulnerability exists in the admin/index.php page of the mallbuilder backend, which allows attackers to exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in mallbuilder frontend admin/index.php page

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. A SQL injection vulnerability exists in the admin/index.php page of mallbuilder, which allows attackers to obtain sensitive database information using common SQL injection tools...

Phpdisk E_Core 3.0 suffers from SQL injection vulnerability

PHPDisk E-Core Enterprise Office Series is a set of enterprise network office, enterprise paperless office and document management system for the network cloud storage disk system. Phpdisk ECore 3.0 'uckey' SQL injection vulnerability. Allow attackers to exploit the vulnerability to change any...

SQL Injection Vulnerability in KuaiFanCMS File /upload/kuaifan/module/xinxi/fasong.module.php

KuaiFanCMS V5.x is developed with PHP5+MYSQL as the technical base. kf is built with Smarty template engine. KuaiFanCMS file /upload/kuaifan/module/xinxi/fasong.module.php at the existence of SQL injection vulnerability, an attacker can use this vulnerability to obtain sensitive database...

SQL Injection Vulnerability in KuaiFanCMS File /upload/kuaifan/module/lianjie/index.module.php

KuaiFanCMS V5.x is developed with PHP5+MYSQL as the technical base. kf is built with Smarty template engine. KuaiFanCMS file /upload/kuaifan/module/lianjie/index.module.php at the existence of SQL injection vulnerability, an attacker can be exploited to obtain sensitive database information...

WordPress Zotpress Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the 'zpgetaccount' function in the WordPress Zotpress plugin, which allows remote attackers to exploit the vulnerability by...

SQL Injection Vulnerability in UFIDA UFO System queryMaxlev method

UFIDA UFO system is UFIDA software comes with tabular data processing software. A SQL injection vulnerability exists in the UFIDA UFO System queryMaxlev method. An attacker is allowed to exploit the vulnerability to obtain database information...

Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerability

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM are both products of the U.S. Cisco Cisco.PI is a set of solutions for wireless management through Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technologies; EPNM is a network...

SkyClassroom Distance Learning Training Platform Has Multiple Generic Vulnerabilities

Sky Classroom is one of the domestic manufacturers that develops online teaching platforms, serving the Ministry of Education, multi-provincial education departments and 360 colleges and universities nationwide. Sky Classroom's distance learning training platform suffers from a number of generic...

SQL Injection Vulnerability in Baishuo Networks CMS Management System

The cms management system is a content management system for text processing, image processing, flash animation, sound and video streaming, images and even email archives. Baishuo network cms management system has SQL injection vulnerability, id parameter filtering is not strict leading to sql...

Streamo Online Radio And TV Streaming CMS SQL Injection Vulnerability

Streamo Online Radio And TV Streaming CMS is a popular online radio and TV streaming content management system. A SQL injection vulnerability exists in the id parameter of the programs.php page of Streamo Online Radio And TV Streaming CMS, which can be exploited by an attacker to take control of...

Cisco Firepower Management Center SQL Injection Vulnerability

Cisco Firepower Management Center is a new generation of firewall management center software from the U.S. company Cisco Cisco. A SQL injection vulnerability exists in the web framework in Cisco Firepower Management Center, which stems from a lack of input validation in the program. A remote...