Ecava IntegraXor SQL Injection Vulnerability (CNVD-2017-37693)

Ecava IntegraXor is a toolset for creating and running human-machine interfaces for Web-based SCADA systems. Ecava IntegraXor suffers from a SQL injection vulnerability that can be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability i...

FS Crowdfunding Script SQL Injection Vulnerability

FS Crowdfunding Script is a set of scripts for online crowdfunding websites based on PHP and MySQL. A SQL injection vulnerability exists in FS Crowdfunding Script version 1.0. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the latestnewsdetails.php file to inject...

PHP Scripts Mall Child Care Script SQL Injection Vulnerability

PHP Scripts Mall Child Care Script is a PHP based daycare, kindergarten online management, booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Child Care Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'city'...

RedHat Update for emacs RHSA-2017:2771-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in BageCms Content Management System (CNVD-2017-28290)

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system suffers from a SQL injection vulnerability , the vulnerability is due to the system fails to effectively filter the parameters , the attacker can use the...

SQL Injection Vulnerability in Ju Teng Technology's Website Building System

Ju Teng Technology website building system is an enterprise website building system. SQL injection vulnerability exists in the Ju Teng Technology website builder system/product.php?pid= page, which can be exploited by attackers to obtain sensitive information from the database...

ShopsN v3.0 SQL Injection Vulnerability in Frontend CartController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 beta3 version CartController.class.php file has a SQL injection vulnerability , due to the system failed to strictly filter the goodsjiesuan function . A remote attacker can exploit the vulnerability to obtain sensitive database...

SQL Injection Vulnerability in the file /qkshowmarc/show_xk.asp of the Mythos™ Literature Management System

Mythos™ Document Management System is a library management reference platform with a professional database as the backend data storage on Windows or UNIX/Linux platform. A SQL injection vulnerability exists in the Qkxxbid parameter of the file /qkshowmarc/showxk.asp in the Mythos™ Document...

ShopsN v2.0 frontend CartController.class.php file order_form function has SQL injection vulnerability

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co. An open source online store in line with enterprise-class commercial standards of the whole network system. In ShopsN v2.0 beta2 version of the front-end CartController.class.php in the orderform functi...

EyesOfNetwork SQL Injection Vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. An SQL injection vulnerability exists in eonweb in EON version 5.1. A remote...

iWebShop open source mall system toSeller parameter SQL injection vulnerability

iWebShop is an open source WEB e-commerce B2B2C platform self-supporting + merchants stationed station-building system based on PHP language + MYSQL database development, using the MVC architecture Yii framework thinking design pattern carefully designed a product. iWebShop open source mall syste...

Drupal Services module SQL injection vulnerability

Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. A SQL injection vulnerability exists in the Drupal Services module, which can be exploited by attackers to...

Huawei FusionSphere and FusionSphere OpenStack Command Injection Vulnerability (CNVD-2017-09507)

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. A command injection vulnerability exists in Huawei...

Xionghai CMS system cookie user parameters exist sql injection vulnerability

XIONGHAI CMS is developed by XIONGHAI can be widely used in personal blogs, personal websites, corporate websites, a set of integrated website management system. Applicable to personal blogs, personal websites, corporate websites and other various purposes, the front end of the computer, mobile t...

Youk365 Classifieds navigation system cate_deion parameter has sql injection vulnerability

Uc365 website classification and navigation system is a cross-platform open source software, you can build up a classified directory or website navigation site. The catedeion parameter of the Uke365 classifieds navigation system suffers from a sql injection vulnerability. Allow attackers to explo...

CVE-2017-6059

A text injection flaw was found in how modauthopenidc handled error pages. An attacker could potentially use this flaw to conduct content spoofing and phishing attacks by tricking users into opening specially crafted URLs...

Itech B2B Script SQL Injection Vulnerability (CNVD-2017-01854)

B2B Script v4.29 is a versatile WEB solution for those who want to quickly publish their B2B portals in minutes. A SQL injection vulnerability exists in the 'id' field in the buyleads-details.php page in B2B Script v4.29, which can be exploited by an attacker to obtain sensitive information from...

Cybozu Garoon vulnerable to SQL injection

Overview Cybozu Garoon provided by Cybozu,Inc. is a groupware. Cybozu Garoon contains an SQL injection vulnerability CWE-89 due to an issue in "MultiReport" function. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc...

Design/Logic Flaw

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code and references to external websites can be injected to the names of PGP public keys. When requesting that key later on using a specific URL, such script code might get executed. In case of injecting external websites,...

Command Injection Vulnerability in Huawei FusionAccess

Huawei FusionAccess is a desktop management system for Huawei's FusionCloud desktop cloud solution from Huawei, China. The system distributes, maintains, and recycles virtual desktops for users through a graphical Portal interface. A command injection vulnerability exists in Huawei FusionAccess...