SQL Injection Vulnerability in the Backend of Tongda OA Collaboration Office System 2017 Version

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

SQL Injection Vulnerability in Joyplus CMS ad***_aj***.php File

Joyplus CMS Joy Video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . Joyplus CMS adaj.php file has a SQL injection...

SQL injection vulnerability in the P_sh*** parameter of the pr***_ad***.php page of the Ship 100 virtual goods auto-shipment system

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. Shipping 100 virtual goods auto-shipment system prad.php page Psh parameter SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Qixing Quote System V2.0 da***.aspx Page (CNVD-2019-45198)

The QI Quotation System is primarily for use by manufacturing companies. For incoming BOM list price monitoring. The system will automatically record the past quoted prices of BOM products, so that the purchasing staff can easily give new quotes. A SQL injection vulnerability exists in the Qixing...

PunBB Database Leakage Vulnerability

PunBB is a PHP-based forum program. PunBB has security vulnerabilities. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in MetInfo ot***_in***.php Page

MetInfo is an enterprise website management system with PHP+Mysql architecture. A SQL injection vulnerability exists in the MetInfo otin.php page, which can be exploited by an attacker to obtain sensitive information from the database...

WordPress Plugin Ultimate Form Builder Database Leakage Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the database of WordPress plugin Ultimate Form Builder. An attacker can exploit the...

WordPress Plugin WP-Forum Database Leakage Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress plugin WP-Forum database. An attacker can exploit the vulnerability to leak...

Joomla Component XMap Database Leakage Vulnerability

Joomla is an open source content management system CMS. A database disclosure vulnerability exists in the Joomla component XMap. An attacker can exploit the vulnerability to obtain sensitive database information...

WordPress Plugin WP-Bannerize Database Backup Leakage Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress plugin WP-Bannerize. An attacker can exploit the vulnerability to obtain...

WordPress Plugin Real-Estate-Listing-Realtyna-Wpl Database Backup Leakage Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress plugin Real-Estate-Listing-Realtyna-Wpl. An attacker can exploit the...

SQL Injection Vulnerability in Website Building System of Huizhou Business Network Co.

Huizhou Business Network Co., Ltd. is an emerging high-tech company specializing in Internet network engineering services. Huizhou Business Network Co., Ltd. building system there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

PbootCMS V1.1.7 SQL Injection Vulnerability in Do***.php Page

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Do.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in the Website Building System of Beijing Maya Network Culture Communication Co.

Beijing Maya Network Culture Communication Co., Ltd. is a company that provides customers with a professional one-stop website construction service platform. Maya Web Design and Construction System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

EyouCms Multiple Pages SQL Injection Vulnerability

Eyou Content Management System EyouCms is developed by php + mysql a set of open source cms dedicated to small and medium-sized enterprise website construction. EyouCms multiple pages exist SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Apple CMS-V7 Backend Get Info Interface

Apple CMS program is a perfect and powerful rapid website building system running on PHP+MYSQL environment. There is a SQL injection vulnerability in the backend interface of Apple CMS-V7 version to obtain information. The reason for the vulnerability stems from the fact that the program does not...

Nordex N149/4.0-4.5 Wind Turbine Web Server SQL Injection Vulnerability

A SQL injection vulnerability exists in Nordex N149/4.0-4.5 Wind Turbine Web Server. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Cloud EC E-commerce System at Front-end User Comments

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system SQL injection vulnerability exists in the front-end user comments. Attackers can use...

Code Execution Vulnerability in ShopsN v2.2.6 Official Backend

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. ShopsN v2.2.6 official version of the code execution vulnerabilities in the background...

ShyPost Enterprise Management System suffers from SQL Injection Vulnerability

ShyPost Enterprise Management System is a set of intelligent ASP-based website building software. ShyPost Enterprise Management System suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to take direct control of the database, resulting in database information...