2911 matches found
SQL Injection Vulnerability in Cumulus Reports
Cumulus Reports is a free enterprise-grade WEB reporting tool. Cumulus Reports suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in Kotto's Fully Intelligent Parking Video Charging System (CNVD-2021-08429)
Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in KOTO's fully intelligent parking video charging system. An attacker can exploit the...
SQL Injection Vulnerability in T_Pa***_Su***.aspx Page of KTO's Fully Intelligent Parking Video Charging System
Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in the TPaSu.aspx page of KOTO's fully intelligent parking video charging system. An attacke...
SQL Injection Vulnerability in ZDNT's Customer Resource Management System (CNVD-2021-08472)
ZDNT Customer Resource Management System is a foreign trade management and foreign trade customer management and other functions of the software. There is a SQL injection vulnerability in ZJUENT Customer Resource Management System, which can be exploited by attackers to obtain sensitive informati...
Sql injection
An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selectedfolder HTTP request body parameter for the acp interface. The affected parameter which retrieves the file contents of the specified folder was found to be accepting malicious...
flatCore SQL Injection Vulnerability (CNVD-2021-03255)
flatCore is a lightweight content management system CMS based on PHP and SQLite. A SQL injection vulnerability exists in flatCore CMS prior to version 2.0.0 build 139. The vulnerability stems from the program accepting input from a malicious user without properly detecting the input, resulting in...
SQL Injection Vulnerability in yycms Movie & TV System V2.3 Admin Catalog yy***_ed***.php
yycms is a movie and television system. yycms film and television system V2.3 version admin directory yyed.php SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...
SAP Business Information Warehouse SQL Injection Vulnerability
SAP Business Information Warehouse SAP BW is a data warehouse for collecting and tabulating information in an enterprise environment from SAP Germany. The software is an enterprise-wide information center for data analysis from R / 3 and other business applications, including databases and extern...
SQL Injection Vulnerability in Miku CMS Movie Management System
Miku CMS Movie and TV Management System is a video playback cms in China. There is a SQL injection vulnerability in Miku CMS, which can be exploited by attackers to obtain sensitive information from the database...
ISPConfig SQL Injection Vulnerability (CNVD-2021-02036)
ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...
CVE-2020-36112
CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application...
SQL Injection Vulnerability in Guangzhou HeYou Network Technology Co.
Guangzhou Hopeful Network Technology Co., Ltd. operates website construction, website design, website promotion, album design and promotion in a business service mode. There is a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...
IBM DB2 Denial of Service Vulnerability (CNVD-2020-73751)
IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM DB2 9.7, 10.1, 10.5, 11.1, 11.5. A local attacker can...
CVE-2018-15632
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials...
SQL Injection Vulnerability in Kingdee Collaboration Office Platform (CNVD-2020-75007)
Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...
CVE-2020-11974
In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database...
FUEL CMS 1.4.8 suffers from SQL Injection Vulnerability
FUELCMS is a CMS system based on the Codeigniter framework. FUEL CMS 1.4.8 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Spotify Changes Passwords After Another Data Breach
Spotify has alerted users that some of their registration data was inadvertently exposed to a third-party business partner, including emails addresses, preferred display names, passwords, gender and dates of birth. This is at least the third breach in less than a month for the world’s largest...
SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70837)
Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...