Exploit for Expression Language Injection in Sonatype Nexus

CVE-2020-10199-10204 http://1984-0day.com python3 poc.py...

SQL Injection Vulnerability in Longmen Technology Website Building System

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. There is a SQL injection vulnerability in the website building system of LongmenTech, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in ForU CMS

ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

SQL Injection Vulnerability in AlpacaCMS

AlpacaCMS is an open source lightweight tree CMS system . It is based on php+mysql and b2core MVC as the underlying architecture . AlpacaCMS SQL injection vulnerability , an attacker can exploit the vulnerability to obtain database data...

Jiangxi Huabang Media Co., Ltd. website building system has SQL injection vulnerability

Jiangxi Huabang Media Co., Ltd. is a comprehensive IT company integrating enterprise informationization construction, network development and Internet marketing. Jiangxi Huabang Media Co., Ltd. building system there is a SQL injection vulnerability, attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in OurPHP

OurPHP is an enterprise e-commerce website builder. OurPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

WordPress Randy Peterman Murph StatTraq SQL Injection Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A SQL injection vulnerability exists in WordPress Randy Peterman Murph StatTraq. An attacke...

Web exhibition PHP foreign trade enterprise website red style has SQL injection vulnerability

Netzhan Technology Beijing Century Netzhan Technology Co., Ltd. is an Internet service operator specializing in the field of exhibition shows. Nethub PHP foreign trade enterprise website red style SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

SQL Injection Vulnerability in Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

Grandstream UCM6200 SQL Injection Vulnerability (CNVD-2020-23201)

The Grandstream UCM6200 is an enterprise-class switch for IP telephony communications from Grandstream. An SQL injection vulnerability exists in the HTTP interface of the Grandstream UCM6200 versions prior to 1.0.19.20 and 1.0.20.17, which can be exploited by an attacker to execute shell commands...

SQL injection vulnerability in news****.php of website building system of Chaozhou Weipai Network Technology Co.

Chaozhou Weipai Network Technology Co., Ltd. focuses on micro-platform planning and development, leveraging on the WeChat public platform and open platform, customized display, interaction, sharing, promotion and sales in one of the micro-platform. Chaozhou City Weipai Network Technology Co., Ltd...

SQL Injection Vulnerability in IISI's Jinan Branch Website Building System

IISI Jinan branch to provide a full set of Internet solutions for enterprises as the main direction is a set of domain name registration, IDC services, website construction and operation, APP development, software system development and other Internet services as one of the group enterprises. IIS...

U-Mail mail server software suffers from SQL injection vulnerability ( CNVD-2020-26499).

U-Mail mail server software is a domestic first-tier brand that really provides lifetime free upgrades to the mail system, including data upgrades to the mail system, antivirus engine, and anti-spam engine. U-Mail mail server software has SQL injection vulnerability, attackers can use the...

SQL injection vulnerability in the ab***.php page bi*** parameter of the website building system of Hefei Yilang Network Technology Co.

Hefei Yilang Network Technology Co., Ltd. is a company specializing in Internet technology services, development and application. Hefei a wave of network technology limited company to build a station system ab.php page bi parameters exist SQL injection vulnerability, an attacker can use the...

SQL injection vulnerability in cl***.php page of website building system of Hubei Guosheng Technology Co.

Ltd. is a full-network value marketing service provider, to provide customers with comprehensive digital innovation services, to help traditional enterprises to realize the "Internet +" transformation and upgrading. There is a SQL injection vulnerability in the cl.php page of the website building...

SQL Injection Vulnerability in Xinhuo OA Office System

Xinhu OA office system is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhao OA Office System, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in cp_***.php file of website building system of Henan Lisuo Internet Information Technology Co.

Henan LISO Internet Information Technology Co., Ltd. is a comprehensive Internet service organization that provides network solutions for enterprises to enhance the value of their Internet marketing. Henan Lishou Internet Information Technology Co., Ltd. building system cp.php file there is a SQL...

Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS exists sql injection vulnerability

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS there is a sql injection vulnerability, attackers can use the vulnerability to obtain database sensitive informati...

SQL injection vulnerability in co***.php page of Yantai Cloud Pulse Network Technology Co.

Yantai Cloud Pulse Network Technology Co., Ltd. is a professional website construction and search engine marketing services provider. Dedicated to small and medium-sized enterprises network marketing services, and website construction, enterprise version of the PC website construction, three-in-o...

Interactive Marketing Intelligent Sales Platform suffers from SQL Injection Vulnerability

Baoding Interactive Enterprise Marketing Planning Co., Ltd. is to provide information technology local services for China's enterprises, in the domestic mode of operation to realize the enterprise information. SQL injection vulnerability exists in Interactive Marketing Intelligent Sales Platform...