SQL injection vulnerability in ro***.php page of Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion, full network marketing, large-scale mall and platform construction, micro letter development, mobile client development, office OA and other services. Jinan Guanan...

Taiyuan Xunyi Technology Co., Ltd. 74cms background SQL injection vulnerability

74cms Knight cms talent system is a free open source professional recruitment system based on PHP + MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. 74cms background SQL injection vulnerabilities, attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in the Information Management System of Certification Body of Shanghai Raspberry Information Technology Co.

Certification body information management system is a set of business management system customized and developed specifically for certification bodies. There is a SQL injection vulnerability in the Certification Body Information Management System of Shanghai Raspberry Information Technology Co. A...

Nagios Injection Vulnerability

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A security vulnerability exists in Nagios version 4.4.5. The vulnerability can be exploited by an attacker to modify the alert histogram and trending function code via modified archive.json,...

SQL injection vulnerability in beescm backend ad***_as***.php file

BEESCMS is a PHP+MYSQL architecture, multi-language system, easy to expand the content module, diversified template styles, can meet the corporate website, foreign trade websites, institutions, educational institutions, personal websites. There is a SQL injection vulnerability in the adas.php fil...

dropwizard-validation injection vulnerability (CNVD-2020-22964)

dropwizard-validation is a library that supports building RESTful web services that can be used in production environments. An injection vulnerability exists in dropwizard-validation versions prior to 2.0.3 and prior to 1.3.21. An attacker can exploit this vulnerability to inject arbitrary Java E...

Insecure HTTP Headers

firefox is vulnerable to insecure HTTP headers. The vulnerability exists as a flaw was found in the way Firefox handled pages with multiple Content Security Policy CSP headers. This could lead to a cross-site scripting attack if used in conjunction with a website that has a header injection flaw...

Samsung Mobile Device Injection Vulnerability (CNVD-2020-32826)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have an injection vulnerability that can be exploited by an attacker to change dynamic libraries and execute arbitrary code with the privileg...

SQL Injection Vulnerability in Shipping 100 Enterprise Official Website Template me***.php

Shipping 100 System is a virtual goods autoship system/article pay to read system. Shipping100 enterprise official website template me.php has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in the ne***_sh***.php page of the Handan Love Help You Do website building system

Handan Love Helps You Do is the first serious and professional marriage agency in Handan. SQL injection vulnerability exists in the nesh.php page of the Handan Love Help You Do website building system, which can be exploited by attackers to obtain sensitive information from the database...

ELTEX NTP-RG-1402G Operating System Command Injection Vulnerability

ELTEX NTP-RG-1402G is a router product from the Russian company ELTEX. An operating system command injection vulnerability exists in the ELTEX NTP-RG-1402G 1v10 version 3.25.3.32. The vulnerability stems from a network system or product not properly filtering special characters, commands, etc. fr...

EyouCms suffers from SQL injection vulnerability (CNVD-2020-02271)

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

Amazon's Blink Smart Security Cameras Open to Hijack

Multiple high-severity vulnerabilities have been discovered in Amazon-owned Blink XT2 security camera systems, which if exploited could give attackers complete control over them. The internet of things IoT cameras not to be confused with the Blink open-source browser engine, consist of a wireless...

74cms Frontend SQL Injection Vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Guangzhou Yuejian Sanhe Software Co.

Guangzhou Yuejian Sanhe Software Co., Ltd. was founded in 1995, mainly engaged in the research and development, sales and service of "urban construction and management" software. A SQL injection vulnerability exists in the website building system of Guangzhou Yuejian Sanhe Software Co., Ltd, whic...

Xingtai Tenghe Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Xingtai Tenghe Network Technology Co., Ltd. is a company that provides comprehensive Internet solutions. Xingtai Tenghe Network Technology Co., Ltd. has a SQL injection vulnerability in its website builder system, which can be exploited by attackers to obtain sensitive server information...

WebOA network office automation software suffers from SQL injection vulnerability (CNVD-2019-45143)

WebOA network office automation software is an office software that allows company employees to download and upload shared information through a browser. A SQL injection vulnerability exists in WebOA Network Office Automation Software. An attacker can exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Ectouch Gr***.cl***.php Page

ECTouch is Shanghai Shangchuang Network Technology Co., Ltd. launched a set of PHP and MySQL database based on the construction of open source and easy to use mobile mall store system. A SQL injection vulnerability exists in the Ectouch Gr.cl.php page, which can be exploited by attackers to obtai...

SQL Injection Vulnerability in MyuCMS us***_xi***.html Page

MyuCMS is a content management system, based on php development. SQL injection vulnerability exists in MyuCMS usxi.html page, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in yiqicms frontend pr***.php file

Yiqi CMS yiqicms is a content management system CMS for marketing-oriented enterprise websites. A SQL injection vulnerability exists in the yiqicms front-end pr.php file. An attacker can exploit the vulnerability to obtain sensitive database information...