CVE-2017-14069

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php...

SQL injection vulnerability in cpzs.asp page p_typeid parameter of Xinyuan website builder system

Xinyuan Network Building System is a website building system. SQL injection vulnerability exists in the ptypeid parameter of the cpzs.asp page of the Xinyuan Network website builder system, which can be exploited by an attacker to obtain sensitive information from the database...

The Next Generation of Genealogy Sitebuilding SQL Injection Vulnerabilities

The Next Generation of Genealogy Sitebuilding TNG is genealogy software developed by Darrin Lythgoe for installation in web servers. A SQL injection vulnerability exists in the primaryID value of the timeline2.php file in versions prior to 11.1.1 of The Next Generation of Genealogy Sitebuilding,...

SQL injection vulnerability in the nav_id parameter of the arc.php page of the Yuntrun website builder system

Yuntrue United website builder system is a website builder system SQL injection vulnerability exists in the navid parameter on the arc.php page of the Yuntrun website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in the class2id parameter of the about.php page of the website building system of Kunming Senyu Technology Co.

Kunming Senyu Technology Co., Ltd. is a website building system. There is a SQL injection vulnerability in the class2id parameter on the about.php page of Kunming Senyu Technology Co. Attackers can use this vulnerability to obtain sensitive database information...

Yunnan Tianren Network Technology Co., Ltd. website building system pic.aspx page tpid parameters exist SQL injection vulnerability

Tianren Network Technology website building system is a website building system. There is a SQL injection vulnerability in the tpid parameter of the pic.aspx page of the website building system of Yunnan Tianren Network Technology Co. An attacker can use this vulnerability to obtain sensitive...

baserCMS SQL Injection Vulnerability

baserCMS is an enterprise-level content management system CMS. A SQL injection vulnerability exists in baserCMS versions 3.0.14 and earlier and 4.0.5 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands, create files, and obtain or change information in...

ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability . As the system fails to effectively filter the addrdel function. A remote attacker can exploit the vulnerability to obtain sensitive database...

ShopsN v3.0 SQL Injection Vulnerability in Frontend UserSetController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 front-end UserSetController.class.php file has a SQL injection vulnerability . As the system fails to effectively filter the addressajax function. A remote attacker can exploit the vulnerability to obtain sensitive database information...

NexusPHP staffbox.php File SQL Injection Vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending the 'setanswered' parameter to the staffbox.php file to...

SEO Panel SQL Injection Vulnerability

Seo Panel is a set of control panels for managing your website's search engine optimization, which provides features such as website rankings, Google, Baidu and other search engine indexing, Sitemaps auto-generator and keyword positioning check. A SQL injection vulnerability exists in versions of...

Multiple vulnerabilities in SEO Panel

Overview SEO Panel provided by SEO Panel contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-10838 SQL injection CWE-89 - CVE-2017-10839 ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...

SQL injection vulnerability in JYmusic UserController.class.php page s parameter

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the JYmusic UserController.class.php page s parameter. A remote attacker can exploit the vulnerability to obtain sensitive database information...

NexusPHP reports.php file SQL injection vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in the reports.php file in NexusPHP version 1.5. A remote attack can exploit this vulnerability to execute arbitrary SQL commands with the 'delreport'...

SQL Injection Vulnerability in Xiaowei OA v2.0

Xiaowei OA system is Beijing Xiaowei Help Technology Co., Ltd. to provide mobile office platform for small and medium-sized enterprises. SQL injection vulnerability exists in Xiaowei OA v2.0, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2017-12910

SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter...

Multiple Vulnerabilities in Duxcms Backend

DuxCms is a PHP development, based on HMVC rules for small and medium-sized enterprises, companies, news, personal and other related industries, website content management. Duxcms backend - form - guestbook cross-site scripting and SQL injection vulnerability. The vulnerability due to the system ...

SQL Injection Vulnerability in ourphp v1.7.3 ourphp_play.class.php Page

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. A SQL injection vulnerability exists in the ourphp v1.7.3 ourphpplay.class.php page. An attacker can exploit this vulnerability to obtain sensitive database informati...

IBOS Enterprise Collaboration Management Software NotifyController.php page actionDetail function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionDetail function on the NotifyController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the...

NiuShop_b2c_data_release has multiple vulnerabilities

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShopb2cdatarelease exists to bypass the payment vulnerability , file upload vulnerability , arbitrary...