Anuko Time Tracker - SQLi (Authenticated)

Exploit Title: Anuko Time Tracker - SQLi Authenticated Date: 2022-05-03 Exploit Author: Altelus Vendor Homepage: https://www.anuko.com/ Software Link: https://github.com/anuko/timetracker/tree/0924ef499c2b0833a20c2d180b04fa70c6484b6d Version: Anuko Time Tracker 1.20.0.5640 Tested on: Linux CVE :...

SQL Injection in salesagility/suitecrm

Description In SuiteCRM v7.12.4, a malicious user can inject SQL query in order to affect the execution of predefined SQL commands impacting database leakage. Proof of Concept The $POST'record'1 parameter is controllable by a user and it is concatenated into SQL query 2 without validating them...

TIBCO Security Advisory: February 15, 2022 - TIBCO BusinessConnect Container Edition -2021-43049

TIBCO BusinessConnect Container Edition username and password leakage Original release date: February 15, 2022 Last revised: --- CVE-2021-43049 Source: TIBCO Software Inc. Products Affected TIBCO BusinessConnect Container Edition versions 1.1.0 and below The following component is affected:...

b2evolution SQL注入漏洞

b2evolution is a community content management system based on PHP and MySQL. A command injection vulnerability exists in b2evolution v7.2.2-stable, which can be exploited by a remote attacker to obtain sensitive database information by injecting SQL commands into the "cf name" parameter when...

Mail.ru: Development configurations file with a sensitive data exposure could be leads to take down the social media accounts and the DB

Configuration files were accessible at tanks.mail.ru leaking configuration information, including database accounts...

SQL Injection Vulnerability in the Website of Beijing Depth Space Decoration Engineering Co.

Beijing Depth Space Decoration Group, founded in 2003, is a member unit of China Building Decoration Association. The website of the branch of Beijing Depth Space Decoration Engineering Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive...

CVE-2020-28994

A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database...

CVE-2020-28994

A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database...

cxuucms SQL Injection Vulnerability

Cxuucms is a PHP-based content relationship building system. cxuucms v3 suffers from a SQL injection vulnerability that originates from leaking all database data via search.php via the keyword parameter. No detailed vulnerability details are available at this time...

CVE-2020-28091

cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php...

CVE-2020-28091

cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php...

Sql injection

cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php...

CVE-2020-28091

cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php...

SQL Injection Vulnerability in the sa***.php file of Anjoye Real Estate System

Anleye is a domestic real estate website construction brand, the program is made of highly efficient PHP5+MYSQL architecture. A SQL injection vulnerability exists in the sa.php file of Anleye real estate system. An attacker can exploit the vulnerability to obtain sensitive information from the...

Cloud Industry CMS suffers from SQL injection vulnerability (CNVD-2020-62423)

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Yunye CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS Backend as***.php File

ZZCMS is a free website builder developed in asp language. There is a SQL injection vulnerability in the as.php file in the background of ZZCMS. An attacker can use this vulnerability to obtain sensitive information from the database...

Anhui Hope Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Anhui Hope Network Technology Co., Ltd. is an Internet basic product service provider mainly engaged in website construction, network promotion and network marketing. Anhui Hope Network Technology Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerabili...

SQL Injection Vulnerability in ecmsshop

ecmsshop is a mall website template based on empire cms. SQL injection vulnerability exists in ecmsshop, which can be exploited by attackers to obtain sensitive database information...

Henan Yue Longmen Technology Co., Ltd. station building system pa*** page SQL injection vulnerability

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. Ltd. station building system pa page there is a SQL injection vulnerability, the attacker can use the vulnerability to obtain database...

SQL Injection Vulnerability in 120 Emergency Command Center Web Service System (CNVD-2020-31570)

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the 120 Emergency Command Center Web Service System, which can be exploite...