671 matches found
SQL injection vulnerability in the ne***_sh***.php page of the Handan Love Help You Do website building system
Handan Love Helps You Do is the first serious and professional marriage agency in Handan. SQL injection vulnerability exists in the nesh.php page of the Handan Love Help You Do website building system, which can be exploited by attackers to obtain sensitive information from the database...
ELTEX NTP-RG-1402G Operating System Command Injection Vulnerability
ELTEX NTP-RG-1402G is a router product from the Russian company ELTEX. An operating system command injection vulnerability exists in the ELTEX NTP-RG-1402G 1v10 version 3.25.3.32. The vulnerability stems from a network system or product not properly filtering special characters, commands, etc. fr...
EyouCms suffers from SQL injection vulnerability (CNVD-2020-02271)
EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...
Amazon's Blink Smart Security Cameras Open to Hijack
Multiple high-severity vulnerabilities have been discovered in Amazon-owned Blink XT2 security camera systems, which if exploited could give attackers complete control over them. The internet of things IoT cameras not to be confused with the Blink open-source browser engine, consist of a wireless...
74cms Frontend SQL Injection Vulnerability
Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...
SQL Injection Vulnerability in Guangzhou Yuejian Sanhe Software Co.
Guangzhou Yuejian Sanhe Software Co., Ltd. was founded in 1995, mainly engaged in the research and development, sales and service of "urban construction and management" software. A SQL injection vulnerability exists in the website building system of Guangzhou Yuejian Sanhe Software Co., Ltd, whic...
Xingtai Tenghe Network Technology Co., Ltd. website building system has SQL injection vulnerabilities
Xingtai Tenghe Network Technology Co., Ltd. is a company that provides comprehensive Internet solutions. Xingtai Tenghe Network Technology Co., Ltd. has a SQL injection vulnerability in its website builder system, which can be exploited by attackers to obtain sensitive server information...
WebOA network office automation software suffers from SQL injection vulnerability (CNVD-2019-45143)
WebOA network office automation software is an office software that allows company employees to download and upload shared information through a browser. A SQL injection vulnerability exists in WebOA Network Office Automation Software. An attacker can exploit the vulnerability to obtain sensitive...
SQL Injection Vulnerability in Ectouch Gr***.cl***.php Page
ECTouch is Shanghai Shangchuang Network Technology Co., Ltd. launched a set of PHP and MySQL database based on the construction of open source and easy to use mobile mall store system. A SQL injection vulnerability exists in the Ectouch Gr.cl.php page, which can be exploited by attackers to obtai...
SQL Injection Vulnerability in MyuCMS us***_xi***.html Page
MyuCMS is a content management system, based on php development. SQL injection vulnerability exists in MyuCMS usxi.html page, which can be exploited by attackers to obtain sensitive database information...
SQL injection vulnerability in yiqicms frontend pr***.php file
Yiqi CMS yiqicms is a content management system CMS for marketing-oriented enterprise websites. A SQL injection vulnerability exists in the yiqicms front-end pr.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
WordPress ninja-forms plugin SQL injection vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form creation plugin used in it. A SQL injection vulnerability exists in the WordPress ninja-forms plugin...
NewStart CGSL CORE 5.04 / MAIN 5.04 : wget Vulnerability (NS-SA-2019-0065)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has wget packages installed that are affected by a vulnerability: - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging to arbitrary domains...
cPanel SQL Injection Vulnerability (CNVD-2019-26351)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A SQL injection vulnerability exists in bin/hordeupdateusernames in cPanel versions prior to 11.54.0.4. The vulnerability stems...
Hubei Yibaitian Network Media Co., Ltd. website builder system has SQL injection vulnerability
YBTS Network Media operates computer software and hardware R&D business and Internet data business in Shanghai Telecom's Caobao Road/Wai Gao Qiao/Wusheng Road and other national server rooms. Hubei YBTS Network Media Co., Ltd. website building system has SQL injection vulnerability, attackers can...
Logitech R500 Injection Vulnerability
The Logitech R500 is a wireless laser presentation remote control from Logitech Switzerland. Logitech R500 suffers from an injection vulnerability. An attacker can exploit this vulnerability to inject keystrokes...
MyBB SQL Injection Vulnerability (CNVD-2019-18513)
MyBB MyBulletinBoard is a free and Web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A SQL injection vulnerability exists in MyBB versions prior to 1.8.21. The vulnerability stems from a...
SemCMS foreign trade website php version V3.8 suffers from SQL injection vulnerability
SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCMS foreign trade website php version V3.8 version of the existence of SQL injection...
SQL injection vulnerability in Jommla!Po*** component (CNVD-2019-12554)
Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Jommla!Po component, which can be exploited by an attacker to obtain sensitive information from the database...