Ctcms frontend cs***.php page has SQL injection vulnerability

Ctcms is a fast website building system that runs on PHP+MYSQL environment. A SQL injection vulnerability exists in the Ctcms frontend cs.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in the front-end mo***_mo***_zh***.asp file of the Eco Times Enterprise Online Bookkeeping Management System.

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

SQL injection vulnerability in the frontend p***_r***.asp file of the EcoTimes Enterprise Online Bookkeeping Management System

EcoTimes Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

SQL injection vulnerability in the front-end mo***_pa***_mo***.asp file of the Environmental Protection Era Enterprise Online Bookkeeping Management System.

EcoTime Enterprise Online Bookkeeping Management System" is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and accounts payable, as well as company's bookkeeping and other related financial...

SQL injection vulnerability in the frontend mo***_sh***.asp file of the EcoTimes Enterprise Online Bookkeeping Management System

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

Discuz Frontend Override Login Vulnerability

Discuz is a general purpose community forum software system. There exists an override login vulnerability in the frontend of Discuz. The vulnerability is due to the administrator login background need account password, the vulnerability will not affect the background, the attacker may log in any...

SQL Injection Vulnerability in the Front-end us***.asp File of Environmental Times Enterprise Online Bookkeeping Management System

Eco Times Enterprise Online Bookkeeping Management System is a financial online bookkeeping software. SQL injection vulnerability exists in the us.asp file in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can use the vulnerability to obtain sensitive...

SQL injection vulnerability in DBShop frontend Go***.php file

DBShop is an e-commerce system. A SQL injection vulnerability exists in the DBShop frontend Go.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in the front-end zh***_mo***.asp file of the online bookkeeping management system of Environmental Times Enterprises (CNVD-2019-06673)

Eco Times Enterprise Online Bookkeeping Management System is a financial online bookkeeping software. There is a SQL injection vulnerability in the zhmo.asp file in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain...

SQL injection vulnerability in the front-end zh***_mo***.asp file of the online bookkeeping management system of Environmental Times Enterprises (CNVD-2019-06672)

Eco Times Business Online Bookkeeping Management System is a financial online bookkeeping software. There is a SQL injection vulnerability in the zhmo.asp file in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in Us***_mo***.asp File of Online Bookkeeping Management System for Environmental Times Enterprises

Eco Times Enterprise Online Bookkeeping Management System is a financial online bookkeeping software. There is a SQL injection vulnerability in the usmo.asp file in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in the Frontend of Worklog 25.0 System by Kaixin Worklog

Worklog is a B/S based software for structuring intra-enterprise collaborative work. A SQL injection vulnerability exists in the frontend of the Qixing Worklog 25.0 system, which can be exploited by attackers to manipulate the database...

UsualToolCMS 8.0 Release frontend se***.php suffers from SQL Injection Vulnerability

UsualToolCMS UTCMS is a content management system and rapid site building framework. UsualToolCMS front-end se.php suffers from a sql injection vulnerability, which can be exploited by attackers to manipulate the database...

SQL Injection Vulnerability in the Frontend of Gallery 27.0, a Qixing Image & Video Library

Qixing Image & Video GalleryGallery is mainly used to store images or videos in the company. A SQL injection vulnerability exists in the frontend of Qixing Image & Video Library Gallery 27.0, which can be exploited by attackers to manipulate the database...

SQL injection vulnerability in Ectouch frontend Ex***.cl***.php file

ECTouch is a mobile mall online store system launched by Shanghai Shangchuang Network Technology Co. A SQL injection vulnerability exists in the Ex.cl.php file in the frontend of Ectouch. Attackers can use the vulnerability to obtain sensitive database information...

CVE-2019-3821

A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADOS gateway to exhaust file descriptors for ceph-radosgw service resulting in a remote denial of service...

SQL injection vulnerability in the sl***.aspx page of the Bid frontend of Qixing bidding system Bid (CNVD-2019-06238)

Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...

SQL Injection Vulnerability in the Frontend Pi***.aspx Page of eDoc, an Electronic Document Library

Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc foreground Pi.aspx page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in the Frontend Do***.aspx Page of eDoc Electronic Document Library

Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc front Do.aspx page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Bidding System Bid Frontend Wo***.aspx Page

Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...