SQL Injection Vulnerability in Disk Enterprise LCMS (CNVD-2021-40145)

Pan Enterprise LCMS is a WEB application development system. A SQL injection vulnerability exists in Pan Enterprise LCMS, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2021-20720

KonaWiki2 is affected by CVE-2021-20720: SQL injection in versions prior to 2.2.4 that allows remote attackers to execute arbitrary SQL commands and obtain/alter data in the application database via unspecified vectors. The vulnerability stems from insufficient input cleansing in KonaWiki2 prior ...

SQL Injection Vulnerability in Rainy Novel cms 1.3.2

Wild Rain Fiction cms hereinafter referred to as KYXSCMS is a content management system that provides a lightweight fiction website solution based on ThinkPHP 5.1 MySQL technology. A SQL injection vulnerability exists in Drizzle Novel cms 1.3.2, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Jacko Web Design Studio Website Building System (CNVD-2021-39106)

Jacko Web Design Studio is an integrated communication agency with services such as website construction, graphic design and advertising production. A SQL injection vulnerability exists in the website building system of Jacko Web Design Studio. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in Fish Leap CMS

FishLeap CMS is a content management system specifically geared towards enterprise applications. A SQL injection vulnerability exists in Fishy CMS, which can be exploited by attackers to obtain sensitive information from the database...

FangfaCMS suffers from SQL injection vulnerability (CNVD-2021-39291)

Method Digital Web Content Management System FangfaCms is an enterprise-level PHPCMS website management system. FangfaCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38037)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

What is Vulnerability Assessment and How to Prevent Them❓

A vulnerability assessment is an essential starting step to surveying your association’s receptiveness to security challenges, including physical and computerized security. It can likewise be portrayed as a lot of specific tests planned to recognize deficiencies in your network and its key...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35734)

jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35733)

Extreme cms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35735)

Extreme cms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35834)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-22783

Etherpad 1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by Etherpad...

Code injection

Etherpad 1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by Etherpad...

CVE-2020-22783

Etherpad 1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by Etherpad...

CVE-2020-22784

Affected software : Etherpad UeberDB (pre-0.4.4). Root cause : MySQL omits trailing spaces on CHAR/VARCHAR during comparisons, allowing bypass of key-name access controls via the MySQL connector. Impact : Bypassing access controls for key names in database records. Status : Exploitation details n...

CVE-2021-29442

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly...

Oracle Linux 8 : mariadb:10.3 / and / mariadb-devel:10.3 (ELSA-2021-1242)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1242 advisory. galera 25.3.32-1 - Rebase to 25.3.32 mariadb 3:10.3.28-1 - Rebase to 10.3.28 Tenable has extracted the preceding description block directly from the Oracle Linu...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34300)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Intelligent Safe Electricity Management Platform of Ankre Electric Co.

Founded in 2003, Anchorui Electric Co., Ltd. is a high-tech joint-stock enterprise integrating R&D, production, sales and service, providing energy efficiency management and electricity safety solutions for enterprise microgrids. A SQL injection vulnerability exists in the Intelligent Safe...