Hubei Yibaitian Network Media Co., Ltd. website builder system has SQL injection vulnerability

YBTS Network Media operates computer software and hardware R&D business and Internet data business in Shanghai Telecom's Caobao Road/Wai Gao Qiao/Wusheng Road and other national server rooms. Hubei YBTS Network Media Co., Ltd. website building system has SQL injection vulnerability, attackers can...

Logitech R500 Injection Vulnerability

The Logitech R500 is a wireless laser presentation remote control from Logitech Switzerland. Logitech R500 suffers from an injection vulnerability. An attacker can exploit this vulnerability to inject keystrokes...

MyBB SQL Injection Vulnerability (CNVD-2019-18513)

MyBB MyBulletinBoard is a free and Web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A SQL injection vulnerability exists in MyBB versions prior to 1.8.21. The vulnerability stems from a...

SemCMS foreign trade website php version V3.8 suffers from SQL injection vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCMS foreign trade website php version V3.8 version of the existence of SQL injection...

SQL injection vulnerability in Jommla!Po*** component (CNVD-2019-12554)

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Jommla!Po component, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2019-7613

Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event...

Changsha Zefan Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Changsha Zefan Network Technology Co., Ltd. is a company providing comprehensive integrated services based on the Internet, mobile Internet and artificial intelligence platform information product design, development, operation and maintenance. Changsha Zefan Network Technology Co., Ltd. station...

Cisco Webex Teams Operating System Command Injection Vulnerability

Cisco Webex Teams is a team collaboration application from Cisco USA. The program includes features such as video conferencing, group messaging and file sharing. Cisco Webex Teams suffers from an operating system command injection vulnerability. An attacker could exploit this vulnerability by...

Shenzhen Zhanlan Design Co., Ltd. website building system has SQL injection vulnerabilities

Shenzhen Zhanlan Design Co., Ltd. formerly known as Zhanlan Design Studio has been focusing on Shenzhen website construction, foreign trade, English website, online shopping mall website, graphic design, and supporting value-added services, we do the marketing website for the latest technology as...

SQL Injection Vulnerability in ShopSn v2.3.6 Official Version

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN v2.3.6 official version of the existen...

git: arbitrary code execution via .gitmodules

An option injection flaw has been discovered in git when it recursively clones a repository with sub-modules. A remote attacker may configure a malicious repository and trick a user into recursively cloning it, thus executing arbitrary commands on the victim's machine...

TouchNet universal mall station building system free version v20181107 foreground SQL injection vulnerability

TouchNet universal mall station-building system is a set of universal station-building system developed by Tianjin TouchNet Technology Co. TouchNet universal mall station building system free version v20181107 SQL injection vulnerability exists in the foreground, an attacker can use the...

SQL Injection Vulnerability in Vantage Network's Website Building System

Taixing Jingchuang Network is a company that provides enterprise Internet application services. A SQL injection vulnerability exists in the website builder system of Jingchuang Network, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Metinfo Website Building System 6.0.0

Founded in March 2009, Changsha Mito Information Technology Co., Ltd. is an Internet enterprise focusing on "providing informatization services for small and medium-sized enterprises". A SQL injection vulnerability exists in Metinfo website builder 6.0.0, which can be exploited by attackers to...

DEBIAN-CVE-2017-12173

It was found that sssd's sysdbsearchuserbyupnres function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password hash was locally cached for a given user, an authenticated attacker could use this fla...

SQL Injection Vulnerability in Coinsun.com Virtual Currency Trading System

Jinshang China Source Code Forum is a website source code trading platform, providing all kinds of commercial source code. A SQL injection vulnerability exists in the virtual currency trading system of Coinsun.com, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Wando Networks Website Building System

Beijing Wando Network Technology Co., Ltd. is a provider of collaborative management software products and services. There is a SQL injection vulnerability in the Wando Network website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Apple CMS-V7 Backend Get Info Interface

Apple CMS program is a perfect and powerful rapid website building system running on PHP+MYSQL environment. There is a SQL injection vulnerability in the backend interface of Apple CMS-V7 version to obtain information. The reason for the vulnerability stems from the fact that the program does not...

Foscam Issues Patches For Vulnerabilities in IP Cameras

Foscam is urging customers to update their security cameras after researchers found three vulnerabilities in that could enable a bad actor to gain root access knowing only the camera’s IP address. The vulnerability trifecta includes an arbitrary file-deletion bug, a shell command-injection flaw a...

PbootCMS v1.0.9 suffers from SQL injection vulnerability

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS v1.0.9 version exists SQL injection vulnerability. Attackers can use the vulnerability to control parameters to achieve SQL injection to obtain important information about the database...