DEBIAN-CVE-2017-12173

It was found that sssd's sysdbsearchuserbyupnres function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password hash was locally cached for a given user, an authenticated attacker could use this fla...

SQL Injection Vulnerability in Coinsun.com Virtual Currency Trading System

Jinshang China Source Code Forum is a website source code trading platform, providing all kinds of commercial source code. A SQL injection vulnerability exists in the virtual currency trading system of Coinsun.com, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Wando Networks Website Building System

Beijing Wando Network Technology Co., Ltd. is a provider of collaborative management software products and services. There is a SQL injection vulnerability in the Wando Network website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Apple CMS-V7 Backend Get Info Interface

Apple CMS program is a perfect and powerful rapid website building system running on PHP+MYSQL environment. There is a SQL injection vulnerability in the backend interface of Apple CMS-V7 version to obtain information. The reason for the vulnerability stems from the fact that the program does not...

Foscam Issues Patches For Vulnerabilities in IP Cameras

Foscam is urging customers to update their security cameras after researchers found three vulnerabilities in that could enable a bad actor to gain root access knowing only the camera’s IP address. The vulnerability trifecta includes an arbitrary file-deletion bug, a shell command-injection flaw a...

PbootCMS v1.0.9 suffers from SQL injection vulnerability

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS v1.0.9 version exists SQL injection vulnerability. Attackers can use the vulnerability to control parameters to achieve SQL injection to obtain important information about the database...

UBUNTU-CVE-2018-5175

A mechanism to bypass Content Security Policy CSP protections on sites that have a "script-src" policy of "'strict-dynamic'". If a target website contains an HTML injection flaw an attacker could inject a reference to a copy of the "require.js" library that is part of Firefox's Developer Tools, a...

CVE-2018-5175

A mechanism to bypass Content Security Policy CSP protections on sites that have a "script-src" policy of "'strict-dynamic'". If a target website contains an HTML injection flaw an attacker could inject a reference to a copy of the "require.js" library that is part of Firefox's Developer Tools, a...

CliqueMania loja virtual SQL injection vulnerability

CliqueMania loja virtual is an online virtual store system. A SQL injection vulnerability exists in CliqueMania loja virtual version 14. A remote attacker can exploit this vulnerability to execute SQL commands with the 'id' parameter...

SQL Injection Vulnerability in KingCMS Version 9.10.0026

KingCMS is a set of easy to learn, simple to operate open source content management system CMS, support PHP + sqLite3/MySQL and ASP + ACCESS/MSSQL, dedicated to the professional development of oriented programs and enterprise website construction system. A SQL injection vulnerability exists in th...

Jiangxi Lugu Network Technology Co., Ltd. website construction system with SQL injection vulnerability

Jiangxi Six Valley Network Technology Co., Ltd. is a company that provides targeted, personalized enterprise website construction solutions. Jiangxi LiuGu Network Technology Co., Ltd. website construction system exists SQL injection vulnerability. Attackers can use the vulnerability to access or...

CVE-2018-5973

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

Ecava IntegraXor SQL Injection Vulnerability (CNVD-2017-37693)

Ecava IntegraXor is a toolset for creating and running human-machine interfaces for Web-based SCADA systems. Ecava IntegraXor suffers from a SQL injection vulnerability that can be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability i...

FS Crowdfunding Script SQL Injection Vulnerability

FS Crowdfunding Script is a set of scripts for online crowdfunding websites based on PHP and MySQL. A SQL injection vulnerability exists in FS Crowdfunding Script version 1.0. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the latestnewsdetails.php file to inject...

PHP Scripts Mall Child Care Script SQL Injection Vulnerability

PHP Scripts Mall Child Care Script is a PHP based daycare, kindergarten online management, booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Child Care Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'city'...

RedHat Update for emacs RHSA-2017:2771-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in BageCms Content Management System (CNVD-2017-28290)

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system suffers from a SQL injection vulnerability , the vulnerability is due to the system fails to effectively filter the parameters , the attacker can use the...

SQL Injection Vulnerability in Ju Teng Technology's Website Building System

Ju Teng Technology website building system is an enterprise website building system. SQL injection vulnerability exists in the Ju Teng Technology website builder system/product.php?pid= page, which can be exploited by attackers to obtain sensitive information from the database...

ShopsN v3.0 SQL Injection Vulnerability in Frontend CartController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 beta3 version CartController.class.php file has a SQL injection vulnerability , due to the system failed to strictly filter the goodsjiesuan function . A remote attacker can exploit the vulnerability to obtain sensitive database...

SQL Injection Vulnerability in the file /qkshowmarc/show_xk.asp of the Mythos™ Literature Management System

Mythos™ Document Management System is a library management reference platform with a professional database as the backend data storage on Windows or UNIX/Linux platform. A SQL injection vulnerability exists in the Qkxxbid parameter of the file /qkshowmarc/showxk.asp in the Mythos™ Document...