SQL Injection Vulnerability in Jingteng Multimedia Co.

Jingteng Multimedia Corporation is a web design and mobile application company in Taiwan. A SQL injection vulnerability exists in the website builder system of Kington Multimedia Corporation, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in BuildingEasy™ of Shanghai Jinhui Software Co. Ltd (CNVD-2021-24687)

Shanghai Jinhui Software Co., Ltd. is a high-tech enterprise focusing on the engineering design and construction industry, specializing in providing enterprise management informatization consulting services and software products. Ltd. BuildingEasy™ suffers from a SQL injection vulnerability, whic...

SQL Injection Vulnerability in E-Ten Intelligent eHR Management Platform

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. E-Trend Intelligent eHR Management Platform has SQL injection vulnerabilities, which ca...

SQL Injection Vulnerability in E-Trend Intelligent eHR Management Platform (CNVD-2021-24435)

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. E-Trend Intelligent eHR Management Platform has SQL injection vulnerabilities, which ca...

SQL Injection Vulnerability in E-Trend Intelligent eHR Management Platform (CNVD-2021-24430)

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. E-Trend Intelligent eHR Management Platform has SQL injection vulnerabilities, which ca...

SQL Injection Vulnerability in Ke361 Frontend

Ke361 is an open source Taobao system. Ke361 frontend has a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...

Cross-Site Scripting in Content Preview

It has been discovered that database fields used as descriptionColumn are vulnerable to cross-site scripting when their content gets previewed in the page module. A valid backend user account is needed to exploit this vulnerability...

CVE-2020-24791

FUEL CMS 1.4.8 allows SQL injection via the 'fuelreplaceid' parameter in pages/replace/1. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

CVE-2020-24791

FUEL CMS 1.4.8 contains a SQL injection in the fuel_replace_id parameter of pages/replace/1. The root cause is an injection vector that allows an attacker to read/modify data and potentially exploit underlying database vulnerabilities. Impact is described as compromising the application and data ...

IBM DB2安全漏洞

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 has a security vulnerability that can be exploited by an attacker to trigger a denial of servi...

SQL Injection Vulnerability in JPress

JPress is a product developed using Java, similar to WordPress. JPress suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in DEDECMS (CNVD-2021-19724)

DEDECMS is a universal tool that allows you to comprehensively manage various sections on your website. DEDECMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Wando Technology's Website Building System

Wando Technology is an information technology company dedicated to enterprise informationization application services, and is an application service provider for enterprises to provide Internet-based business solutions. A SQL injection vulnerability exists in Wando Technology's website builder...

Code injection

An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code...

SQL Injection Vulnerability in Water Rights Trading System (CNVD-2021-18285)

Tangshan Liulin Automation Equipment Co., Ltd. is a high-tech enterprise specializing in the research and development, production, sales and system engineering technical services of Internet of Things security communication terminal and intelligent application platform software. There is a SQL...

SQL Injection Vulnerability in Qibo Cloud Micro Distribution

Micro-distribution is a "micro-mall + micro-distribution" social e-commerce marketing platform, based on the spread of the WeChat circle of friends, easily lead thousands of WeChat users together for you to sell goods, sales of goods. Qibo cloud micro distribution SQL injection vulnerability...

SAP HANA Database Signature Validation Improperity Vulnerability

SAP HANA is a set of high-performance real-time data analytics platform from Germany's SAP, which supports users to query and analyze real-time business data. An improper signature validation vulnerability exists in SAP HANA Database versions 1.0 and 2.0. The vulnerability stems from the program...

Shanghai Yijue Network Technology Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2021-16460)

The business scope of Shanghai Yijue Network Technology Co., Ltd. includes technical development, technology transfer, technical consultation, technical services in the field of network technology, computer technology, information technology, computer network engineering and so on. Shanghai Yijue...

SQL Injection Vulnerability in Purple File Management System

hereinafter referred to as "Violet Software" is a provider of industry solutions and IT services. A SQL injection vulnerability exists in the Zilight File Management System. An attacker could exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in LUCA OA (Government Edition)

LUCA OA system adopts three-tier structure mode, system development adopts java technology, and the database supports Mysql, SQL Server, Oracle and so on. SQL injection vulnerability exists in LUCA OA Government Edition, which can be exploited by attackers to obtain sensitive information from the...