CVE-2015-10045

CVE-2015-10045 affects the tutrantta project_todolist, specifically the library/Database.php function getAffectedRows/where/insert/update. The issue is a SQL injection vulnerability reported as critical. A patch named 194a0411bbe11aa4813f13c66b9e8ea403539141 is recommended to fix the issue. Publi...

CVE-2015-10045: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in tutrantta projecttodolist. Affected is the function getAffectedRows/where/insert/update in the library library/Database.php. The manipulation leads to sql injection. The name of the patch is 194a0411bbe11aa4813f13c66b9e8ea403539141. ...

CVE-2022-30452

ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...

CVE-2022-30452

ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...

CVE-2022-30453

ShopWind = 3.4.2 has a RCE vulnerability in Database.php...

CVE-2022-30453

ShopWind = 3.4.2 has a RCE vulnerability in Database.php...

CVE-2022-30453

ShopWind = 3.4.2 has a RCE vulnerability in Database.php...

CVE-2022-30452

ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...

Sql injection

ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...

Design/Logic Flaw

ShopWind = 3.4.2 has a RCE vulnerability in Database.php...

CVE-2022-30453

ShopWind

CVE-2022-30452

ShopWind

CVE-2022-30452

ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...

CVE-2022-30452: Improper Neutralization of Special Elements used in an SQL Command

ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...

CVE-2022-30453: Undefined Security Weakness

ShopWind = 3.4.2 has a RCE vulnerability in Database.php...

ShopWind 安全漏洞

ShopWind is a B2B2C, O2O industry e-commerce system software based on the Yii2.0 framework deeply reconstructed by China ShopWind. You can easily create and publish your own brand of professional e-commerce platform for a full range of branding and product promotion. A security vulnerability exis...

baijiacms path traversal vulnerability

baijiacms is a content management system CMS for e-commerce. baijiacms is vulnerable to a path traversal vulnerability, which stems from a directory traversal vulnerability found in database.php, which allows an attacker to delete a folder on any server with the id parameter...

Directory traversal

A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the "id" parameter...

baijiacms 路径遍历漏洞

baijiacms is a content management system CMS for e-commerce. baijiacms is vulnerable to a path traversal vulnerability, which stems from a directory traversal vulnerability found in database.php, which allows an attacker to delete a folder on any server with the id parameter...

CVE-2020-25873: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the "id" parameter...