SQL Injection Vulnerability in Decoction Management System of Beijing Donghuayuan Medical Equipment Co.

Beijing Donghuayuan Medical Equipment Co., Ltd. is a national high-tech enterprise and a key high-tech enterprise of the National Torch Program. There is a SQL injection vulnerability in the Decoction Management System of Beijing Donghuayuan Medical Equipment Co., Ltd. which can be exploited by...

SQL Injection Vulnerability in Website Building System of Ningbo Yongguan Network Technology Co.

Ningbo Yongguan Network Technology Co., Ltd. specializes in ningbo website construction company, ningbo website design, ningbo website production company, ningbo website promotion, ningbo do website and other businesses. Ningbo Yongguan Network Technology Co., Ltd. website building system there a...

Multiple SQL Injection Vulnerabilities in DM Enterprise Website System Backend

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM enterprise website building system background there are multiple SQL injection vulnerabilities. Attackers can use the vulnerability to...

SQL Injection Vulnerability in the Website Building System of Shenzhen ShuoWin Interactive Information Technology Co.

Shenzhen ShuoWin Interactive Information Technology Co., Ltd. was founded in October 2006, is a web2.0 application website and launched SNS business services. There is a SQL injection vulnerability in the website system of Shenzhen ShuoWin Interactive Information Technology Co., Ltd, which can be...

SQL Injection Vulnerability in YUNUCMS of Zhenjiang Yunyu Network Technology Co., Ltd (CNVD-2020-41337)

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Virtual Airlines Manager

VAM originated as a system developed for the Spanish VA with the goal of having a complete web system independent of other systems. A SQL injection vulnerability exists in Virtual Airlines Manager, which can be exploited by an attacker to obtain sensitive information about a database...

SQL injection vulnerability in new*** page of website building system of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. Ltd. station building system new page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

WatermelonDB SQL Injection Vulnerability

WatermelonDB is the next generation React database for building powerful React and React Native applications that can scale from hundreds to tens of thousands of records while remaining fast. A SQL injection vulnerability in WatermelonDB versions prior to 0.15.1 and prior to 0.16.2, which stems...

CVE-2020-4035

Summary: WatermelonDB (package "@nozbe/watermelondb") before versions 0.15.1 and 0.16.2 is affected by a SQL Injection vulnerability in the iOS adapter that can, via a maliciously crafted record ID, delete all or selected records and render the app unusable. What is affected: WatermelonDB with vu...

SQL Injection Vulnerability in Appform for Leave System

Qixing Leave System includes leave, overtime, approval, annual leave, transfer, work calendar and report modules. SQL injection vulnerability exists in the Leave System Appform, which can be exploited by attackers to obtain sensitive information from the database...

The vulnerability of the FTS3 virtual table module in the SQLite database management system allows a hacker to execute arbitrary code.

The vulnerability of the FTS3 virtual table module in the SQLite database management system is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

SQL Injection Vulnerability in the Website Building System of Suzhou Topps Network Technology Co.

Suzhou Topps Network Technology Co., Ltd. is engaged in solving the website construction, Baidu promotion, Baidu bidding hosting, Ali network marketing treasure hosting, optimization station rental and sale. Suzhou Topps Network Technology Co., Ltd. station building system there is a SQL injectio...

The vulnerability of the central control server of SiNVR 3 allows a hacker to read or modify the database of the central control server, as well as perform operations on the databases or operating system commands with administrator privileges.

The vulnerability of the central control server of SiNVR 3 Central Control Server lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to remotely read or modify the central control server’s database, as well as perform operations o...

SQL Injection Vulnerability in One Card Communication Service Client of Xiondi Co.

The XIONGDY Technology OneCard Communication Service Client is a one-card management system of XIONGDY Co. A SQL injection vulnerability exists in the One Card Communication Service Client of Xiondi Corporation. An attacker can exploit the vulnerability to obtain sensitive information from the...

SQL Injection Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.(CNVD-2020-33072)

Digital campus is based on digital information and network, established on computer and network technology for the collection, processing, integration, storage, transmission and application of campus information on teaching, scientific research, management, technical services, life services, etc....

CVE-2020-3184

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates...

SQL Injection Vulnerability in Stone Technology Online Exam System kg***_ks***.php Page

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores. A...

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant wl***_gl***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the wlgl.p...

SQL Injection Vulnerability in Complaint Management System

Complaint Management System is a PHP project that allows complaints to be requested through an online service. The system is built using PHP, HTML, MYSQLi and Javascript. The Complaint Management System suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain...

SQL Injection Vulnerability in Haiwell's Cloud SCADA Cloud Configuration Software

Haiwell Haiwell cloud configuration software Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. A SQL injection vulnerability exists in Haiwell Cloud SCADA, which can be exploited by an attacker to obtain sensitive...