SQL Injection Vulnerability in Bu***.htm Page of Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. Ltd. home furnishing ERP management system Bu.htm page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

SQL Injection Vulnerability in As***.aspx Page of Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. Ltd. home furnishing ERP management system As.aspx page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database information...

Researcher Demonstrates Several Zoom Vulnerabilities at DEF CON 28

Popular video conferencing app Zoom has addressed several security vulnerabilities, two of which affect its Linux client that could have allowed an attacker with access to a compromised system to read and exfiltrate Zoom user data—and even run stealthy malware as a sub-process of a trusted...

SQL Injection Vulnerability in Instant Messaging Manager

Instant Messaging Manager is a tool that combines communication capabilities. Instant Messaging Manager suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

RaspberryTortoise WebControl Injection Vulnerability

RaspberryTortoise is a software package for programming robotic vehicles.WebControl is one of the web-based controllers. An injection vulnerability exists in WebControl in RaspberryTortoise on 2012-10-28 and earlier, which stems from the program failing to properly validate strings and can be...

LibEtPan Injection Vulnerability

LibEtPan is a library from the developers of Hoà V. DINH software that provides a portable framework for a wide range of mail accesses such as IMAP, SMTP, POP and NNTP. An injection vulnerability exists in LibEtPan 1.9.4 and earlier versions, which can be exploited by an attacker to conduct a...

SQL Injection Vulnerability in LJCMS of Beijing Liang Jing Zhi Cheng Technology Co.

LJCMS adopts PHP + Mysql architecture, is a very SEO friendly, full-featured, safe and stable, support multi-terminal display and extremely simple to use enterprise station building system. LJCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database...

SQL Injection Vulnerability in ZZCMS Backend as***.php Page

ZZCMS is a free website builder developed in asp language. ZZCMS background as.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Tobesoft Xplatform Injection Vulnerability

Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS autosetting, and multi-document interfaces. A security vulnerability exists in COMPONENT in TOBESOFT Xplatform 9.2.260 and earlier versions Windows...

PT-2020-14164 · Phplist · Phplist

Name of the Vulnerable Software and Affected Versions: phpList versions prior to 3.5.5 Description: An error-based SQL Injection issue exists via the Import Administrators section, allowing potential exploitation. Recommendations: For versions prior to 3.5.5, update to version 3.5.5 or later to...

SQL injection vulnerability in ro***.php page of Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion, full network marketing, large-scale mall and platform construction, micro letter development, mobile client development, office OA and other services. Jinan Guanan...

Taiyuan Xunyi Technology Co., Ltd. 74cms background SQL injection vulnerability

74cms Knight cms talent system is a free open source professional recruitment system based on PHP + MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. 74cms background SQL injection vulnerabilities, attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in the Information Management System of Certification Body of Shanghai Raspberry Information Technology Co.

Certification body information management system is a set of business management system customized and developed specifically for certification bodies. There is a SQL injection vulnerability in the Certification Body Information Management System of Shanghai Raspberry Information Technology Co. A...

CVE-2020-7496

A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior formerly known as Vijeo XDwhich could cause unauthorized write access when opening the project file...

Nagios Injection Vulnerability

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A security vulnerability exists in Nagios version 4.4.5. The vulnerability can be exploited by an attacker to modify the alert histogram and trending function code via modified archive.json,...

SQL injection vulnerability in beescm backend ad***_as***.php file

BEESCMS is a PHP+MYSQL architecture, multi-language system, easy to expand the content module, diversified template styles, can meet the corporate website, foreign trade websites, institutions, educational institutions, personal websites. There is a SQL injection vulnerability in the adas.php fil...

dropwizard-validation injection vulnerability (CNVD-2020-22964)

dropwizard-validation is a library that supports building RESTful web services that can be used in production environments. An injection vulnerability exists in dropwizard-validation versions prior to 2.0.3 and prior to 1.3.21. An attacker can exploit this vulnerability to inject arbitrary Java E...

Insecure HTTP Headers

firefox is vulnerable to insecure HTTP headers. The vulnerability exists as a flaw was found in the way Firefox handled pages with multiple Content Security Policy CSP headers. This could lead to a cross-site scripting attack if used in conjunction with a website that has a header injection flaw...

Samsung Mobile Device Injection Vulnerability (CNVD-2020-32826)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have an injection vulnerability that can be exploited by an attacker to change dynamic libraries and execute arbitrary code with the privileg...

SQL Injection Vulnerability in Shipping 100 Enterprise Official Website Template me***.php

Shipping 100 System is a virtual goods autoship system/article pay to read system. Shipping100 enterprise official website template me.php has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...