Design/Logic Flaw

An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server...

ZZCMS suffers from SQL injection vulnerability (CNVD-2020-66606)

ZZCMS is a content management system for Webmaster Merchants. ZZCMS 2020 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Bluecms suffers from SQL injection vulnerability (CNVD-2020-62376)

bluecms enterprise website is an asp+access for the development of enterprise website cms. Bluecms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in PV Power Plant Monitoring System of Jiangsu Goodway Power Technology Co.

Jiangsu Goodway Power Supply Technology Co., Ltd. is a new energy high-tech enterprise. A SQL injection vulnerability exists in the monitoring system of the photovoltaic power plant of Jiangsu Goodway Power Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information fr...

Foshan Tiema Software Co., Ltd. Tiema Mobile Phone Query System Login Page Exists SQL Injection Vulnerability

Foshan Tiema Software Company, is a high-tech software company specializing in enterprise information management engineering, to provide personalized solutions for different types of enterprises. Foshan Iron Horse Software Co., Ltd Iron Horse cell phone query system login page SQL injection...

CVE-2020-15925

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPFXPAR1 parameter...

Wuxi Yi Shang Technology Co., Ltd. website building system has SQL injection vulnerabilities

Ltd. is a network company that provides professional, perfect and comprehensive informatization services for small and medium-sized enterprises and business people through a network service platform. There is a SQL injection vulnerability in the website building system of Wuxi Yi Shang Technology...

SQL Injection Vulnerability in As***.aspx Page of Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. Ltd. home furnishing ERP management system As.aspx page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Bu***.htm Page of Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. Ltd. home furnishing ERP management system Bu.htm page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

Researcher Demonstrates Several Zoom Vulnerabilities at DEF CON 28

Popular video conferencing app Zoom has addressed several security vulnerabilities, two of which affect its Linux client that could have allowed an attacker with access to a compromised system to read and exfiltrate Zoom user data—and even run stealthy malware as a sub-process of a trusted...

SQL Injection Vulnerability in Instant Messaging Manager

Instant Messaging Manager is a tool that combines communication capabilities. Instant Messaging Manager suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

RaspberryTortoise WebControl Injection Vulnerability

RaspberryTortoise is a software package for programming robotic vehicles.WebControl is one of the web-based controllers. An injection vulnerability exists in WebControl in RaspberryTortoise on 2012-10-28 and earlier, which stems from the program failing to properly validate strings and can be...

LibEtPan Injection Vulnerability

LibEtPan is a library from the developers of Hoà V. DINH software that provides a portable framework for a wide range of mail accesses such as IMAP, SMTP, POP and NNTP. An injection vulnerability exists in LibEtPan 1.9.4 and earlier versions, which can be exploited by an attacker to conduct a...

SQL Injection Vulnerability in LJCMS of Beijing Liang Jing Zhi Cheng Technology Co.

LJCMS adopts PHP + Mysql architecture, is a very SEO friendly, full-featured, safe and stable, support multi-terminal display and extremely simple to use enterprise station building system. LJCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database...

SQL Injection Vulnerability in ZZCMS Backend as***.php Page

ZZCMS is a free website builder developed in asp language. ZZCMS background as.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Tobesoft Xplatform Injection Vulnerability

Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS autosetting, and multi-document interfaces. A security vulnerability exists in COMPONENT in TOBESOFT Xplatform 9.2.260 and earlier versions Windows...

PT-2020-14164 · Phplist · Phplist

Name of the Vulnerable Software and Affected Versions: phpList versions prior to 3.5.5 Description: An error-based SQL Injection issue exists via the Import Administrators section, allowing potential exploitation. Recommendations: For versions prior to 3.5.5, update to version 3.5.5 or later to...

SQL injection vulnerability in ro***.php page of Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion, full network marketing, large-scale mall and platform construction, micro letter development, mobile client development, office OA and other services. Jinan Guanan...

Taiyuan Xunyi Technology Co., Ltd. 74cms background SQL injection vulnerability

74cms Knight cms talent system is a free open source professional recruitment system based on PHP + MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. 74cms background SQL injection vulnerabilities, attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in the Information Management System of Certification Body of Shanghai Raspberry Information Technology Co.

Certification body information management system is a set of business management system customized and developed specifically for certification bodies. There is a SQL injection vulnerability in the Certification Body Information Management System of Shanghai Raspberry Information Technology Co. A...