Fiyo CMS SQL Injection Vulnerability

Fiyo CMS is a content management system CMS for creating CMS templates. A SQL injection vulnerability exists in Fiyo CMS that stems from the program failing to adequately filter user-submitted input before constructing SQL query statements. An attacker could use this vulnerability to compromise t...

UBUNTU-CVE-2015-4634

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

Welcart vulnerable to SQL injection

Overview Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a SQL injection CWE-89 vulnerability due to the processing of changeSort parameter in admin.php. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

Thetis vulnerable to SQL injection

Overview Thetis provided by Sysphonic Co., Ltd. is an open source groupware and SNS. Thetis contains a SQL injection CWE-89 vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An attack...

SQL Injection Vulnerability in Zhixiang OA Office System/mainpage/msg.aspx?user=parameters

Zhixiang OA office system is an enterprise office system. A SQL injection vulnerability exists in the OpenWindows/OpenleibiezlMc.aspx?id= parameter of the Zhixiang OA Office System, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flowimage_page.php Parameters

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flowimagepage.php parameter, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flownext_page.php Parameters

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flownextpage.php parameter, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flow/flowhave_page.php Parameters

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flow/flowhavepage.php parameter, which can be exploited by an attacker to obtain sensitive information from the database...

Milw0rm Clone Script 'admin/login.php' SQL Injection Vulnerability

Milw0rm Clone Script is a Milw0rm clone script. Milw0rm Clone Script 'admin/login.php' fails to properly filter user-supplied input and is vulnerable to multiple SQL injection vulnerabilities. This allows attackers to compromise the application, access or modify data, or exploit potential...

SQL Injection Vulnerability in Add Parameters of Nanjing Jenohan Journal Submission System

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. An SQL injection vulnerability exists in the Add paramete...

SQL Injection Vulnerability in the Page Parameters of Nanjing Jenohan Journal Submission System

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. SQL injection vulnerability exists in the page parameter ...

LimeSurvey SQL Injection Vulnerability (CNVD-2015-04153)

LimeSurvey formerly known as PHPSurveyor is a set of open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution and data collection. A SQL injection vulnerability exists in the insert function in the...

SQL Injection Vulnerability in Name Parameter of Times Internet Enterprise Email System

Times Internet is dedicated to providing professional email service providers for a wide range of enterprise-level users. A SQL injection vulnerability exists in the name parameter of the webmail/login.php page in version 2.2.5 of Times Internet's enterprise email system. It allows attackers to...

Cisco IM and Presence Service SQL Injection Vulnerability

Cisco IM and Presence Service provides enterprise-class instant messaging and network presence services. Cisco IM and Presence Service fails to properly validate user input within a sql query, which can be exploited by an authenticated, remote attacker to read, modify, or delete entries within...

SQL Injection Vulnerability in the type parameter of Haitian OA System/ZhuanTi/DocMain.asp Page

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...

Multiple SQL Injection Vulnerabilities in Eproductsurf

Eproductsurf is a suite of web design, web development and online marketing solutions from Eproductsurf UAE. Eproductsurf suffers from multiple SQL injection vulnerabilities that stem from the program's failure to adequately filter user-submitted input before constructing SQL query statements. An...

Drupal Novalnet Payment - Ubercart Module SQL Injection Vulnerability

Drupal is a free and open source content management system developed in PHP.Novalnet Payment is a payment module. A SQL injection vulnerability exists in the Drupal Novalnet Payment - Ubercart module due to the program failing to adequately filter user-supplied input. The vulnerability allows...

SysAid Help Desk SQL Injection Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. SQL injection vulnerability in multiple scripts in SysAid Help Desk allows remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...

WordPress NewStatPress Plugin SQL Injection Vulnerability

WordPress is a set of blogging platform developed using the PHP language, support for setting up personal blog sites on PHP and MySQL servers.NewStatPress is a plugin for website access statistics management. WordPress NewStatPress suffers from a SQL injection vulnerability that allows remote...

Multiple Cross-Site Request Forgery Vulnerabilities in osCMax

osCMax is a PHP-based open source e-commerce system/shopping cart application that supports multi-language, SSL-secured transactions, multiple payment methods, regional shipping conversion, printing invoices and more. Multiple cross-site request forgery vulnerabilities exist in versions of osCMax...