YouDianCMS suffers from SQL injection vulnerability (CNVD-2020-28103)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability, attackers can use the vulnerability to obtain databas...

HPE IMC ForwardRedirect Expression Language Injection

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the actionbean request parameter provided to the forwardredirect.xhtml endpoint...

Tongda OA suffers from SQL injection vulnerability (CNVD-2020-28123)

Tongda OA is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd, which is a comprehensive management and office platform combined with China's enterprise management practices. There is a SQL injection vulnerability in Tongda OA,...

Guangdong Century ICT Network Technology Co., Ltd Supervision Pass - Supervision Enterprise Comprehensive Business Management System suffers from SQL Injection Vulnerability

Supervision through - supervision enterprise integrated business management system, is the Guangdong Century ICT Network Technology Co., Ltd. for the domestic engineering consulting enterprises engineering supervision, project management, cost, bidding agency, project construction informatization...

HPE Intelligent Management Remote Rode Execution (CVE-2019-5386)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the class...

Sophos XG Firewall SFOS SQL Injection Vulnerability

Sophos XG firewall and SFOS are both products from Sophos UK.Sophos XG firewall is a next generation endpoint protection and enterprise firewall product.SFOS is an operating system for Sophos firewall products. An SQL injection vulnerability exists in SFOS on Sophos XG Firewall appliances...

SQL Injection Vulnerability in Backend Advertisements of Inkoo Online Education Software

Beijing IncuTimes Technology Co., Ltd "IncuTimes", founded in 2015, is a domestic educational products and technology service provider. A SQL injection vulnerability exists in the background advertisement map of Incu online education software, which can be exploited by attackers to obtain sensiti...

TXQPHP Blog suffers from SQL Injection Vulnerability

TXQPHP Blog is a PHP blog system source code suitable for novice practitioners to practice, the system is written using MYSQLI, the front three templates home page, content page, message boards categories. TXQPHP Blog has a SQL injection vulnerability , an attacker can use this vulnerability to...

SQL Injection Vulnerability in zh***.php Page of Huaxia Chemical Website Builder System

Huaxia chemical network is by Shanghai Danfan network technology limited company founded, is for the chemical industry to provide security, high efficiency, multi-function, system supporting B2B electronic commerce platform of professional website. There is a SQL injection vulnerability in zh.php...

SQL Injection Vulnerability in Heybbs 1.2 re***.php File

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. A SQL injection vulnerability exists in the Heybbs 1.2 re.php file, which can be exploited by attackers to obtain database information...

Jshop applet mall program has SQL injection vulnerability

Jshop small program mall is an open source e-commerce system. Jshop applet mall program has a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in GoWeb Web System

Goodposition Technology Co., Ltd. is a company that provides web application services to users. A SQL injection vulnerability exists in the GoWeb web system, which can be exploited by attackers to obtain sensitive information from the database...

Nexus Repository Manager - Java EL Injection RCE (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Nexus Repository Manager Java EL Injection RCE', 'Description' = %q This module exploits a Java Expression Language EL injection in Nexus...

CVE-2020-11816

Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the reportsid POST parameter...

Nexus Repository Manager 3.21.1-01 Remote Code Execution Exploit

This Metasploit module exploits a Java Expression Language EL injection in Nexus Repository Manager versions up to and including 3.21.1 to execute code as the Nexus user. Tested against 3.21.1-01. This module requires Metasploit: https://metasploit.com/download Current source:...

SQL Injection Vulnerability in Website Building System of Taizhou Qicheng Network Technology Co.

Taizhou Qicheng Network Technology Co., Ltd. is an Internet company engaged in web design, website production, website program development, website optimization/promotion, enterprise mailbox, enterprise management software development. There is a SQL injection vulnerability in the website buildin...

SQL Injection Vulnerability in Jilin Zhongnuo Technology Co.

Jilin Zhongnuo Technology Co., Ltd. is an Internet + technology and service provider. Jilin Zhongnuo Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

ShopsN open source mall system SQL injection vulnerability

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system SQL injection vulnerability ,...

SQL Injection Vulnerability in PatrolFlow of Beijing Byzoro Network Technology Co.

PatrolFlow is a multi-service security gateway intelligent management platform of Beijing Byzoro Network Technology Co. A SQL injection vulnerability exists in PatrolFlow of Beijing Byzoro Networks Technology Co. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Laikepui E-commerce System of Hunan One Eight Network Technology Co. Ltd (CNVD-2020-25309)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. There is a SQL injection vulnerability in the Laike Push e-commerce system of Hunan One Eight Network Technology Co. Ltd, which can be exploited by an attacker to obtain...