SQL Injection Vulnerability in Runge Marking System

Chengdu R&G Unlimited Technology Co., Ltd. is a company engaged in the research and development, sales of computer hardware and software, electronic products and provide technical services, technical consulting. A SQL injection vulnerability exists in the Runge Marking System, which can be...

SQL Injection Vulnerability in Huaxia Chemical Website Building System (CNVD-2020-32350)

Huaxia Chemical Network was founded in 2000, is founded by Shanghai Danfan Network Technology Co., Ltd, is for the chemical industry to provide security, high efficiency, multi-functional, systematic supporting B2B e-commerce platform of professional website. Huaxia Chemical website building syst...

CVE-2020-11006

CVE-2020-11006 affects Shopizer prior to 2.11.0, where a script can be injected and stored in the database, then executed on backend fetch. Root cause is input/script injection into data persisted by the application; this is mitigated by upgrading to version 2.11.0 or later. Reports in connected ...

CVE-2020-12687

CVE-2020-12687 affects Serpico prior to 1.3.3. The /admin/attacments_backup endpoint may be accessed by non-admin authenticated users, allowing retrieval of all user attachments (including administrator data). Red Hat, CNVD, OSV, and other sources corroborate this information. A fix is available ...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2020-32338)

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Shining Networks Virtual Goods Auto-Shipping System (Ship 100)

Virtual Goods Autoship System Ship 100 is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in Shining Networks Virtual Goods Auto Shipment System Shipment 100, which can be exploited by attackers to obtain sensitive information from the database...

Rukovoditel SQL Injection Vulnerability (CNVD-2020-26837)

Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management , customer relationship management and other functions . A SQL injection vulnerability exists in Rukovoditel version 2.5.2. The vulnerability stems from a lack ...

The vulnerability of the sqlite3WindowRewrite function in the SQLite database management system, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the sqlite3WindowRewrite function in the SQLite database management system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Gaming controllers manufacturer exposed 1.1M customer records

By Sudais Asif The company, a known manufacturer of gaming controllers and other accessories had left the database exposed to malicious actors without any security authentication. This is a post from HackRead.com Read the original post: Gaming controllers manufacturer exposed 1.1M customer record...

Unauthorized Access

mysql is vulnerable to unauthorized access. MySQL allowed remote authenticated users to create or access a database when the database name differed only in case from a database for which they had permissions...

SQL Injection Vulnerability in the Website Building System of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a comprehensive network technology company founded on website construction, software development and promotion marketing. There are SQL injection loopholes in the website construction system of Henan Leaping Dragon Gate Technology Co., Ltd. which can be...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2020-25586)

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Guangzhou Changmeng Network Website Building System

Guangzhou Changmeng Network is a team that provides website construction, website promotion and network marketing solutions under the banner of Guangzhou Xingmeng Animation Design Company Limited a total of three departments: Animation Department, Product Design Department former Good Design Stud...

Micro Focus Service Manager Automation SQL Injection Vulnerability

Micro Focus Service Manager is a suite of service desk software from Micro Focus UK. The software supports the deployment of a comprehensive IT service management ITSM system and standardizes management processes. A SQL injection vulnerability exists in Micro Focus SMA. The vulnerability stems fr...

CVE-2019-12122

An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected...

Default credentials

An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected...

CVE-2019-12122

An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected...

CVE-2020-1720

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issu...

SQL Injection Vulnerability in EjuCMS Frontend of Hainan Eju Technology Co.

Eju real estate system EjuCMS is a set of localized O2O real estate website platform system, users can quickly find their own suitable real estate, real estate agents to promote their own exclusive sale of properties and so on. Ltd. EjuCMS front-end SQL injection vulnerability, attackers can use...

SQL Injection Vulnerability in Website Building System of Hainan Liantuo Technology Co.

Ltd. is engaged in network marketing research and development of high-tech enterprises, long-term commitment to government agencies, enterprises and institutions, schools, Internet platform construction and promotion, to provide customers with a full range of solutions for website construction,...