The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to address the issue of eliminating special elements used in SQL queries. This allows a violator to obtain the contents of the database.

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to take measures to neutralize special elements used in SQL queries. Exploiting this vulnerability can allow an attacker, operating remotely...

SQL Injection Vulnerability in Beijing Night Cat Website Building System

Beijing Nightcats Tiancheng Network Technology Co., Ltd referred to as Nightcats Network, is a professional website design and website construction service provider. There is a SQL injection vulnerability in Beijing Nightcats website building system, which can be exploited by attackers to obtain...

CVE-2019-12149

SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverstripe/registry module 2.1.x before 2.1.1 and 2.2.x before 2.2.1 allows attackers to execute arbitrary SQL commands...

ZOHO ManageEngine Netflow Analyzer SQL Injection Vulnerability

ZOHO ManageEngine Netflow Analyzer is a set of web-based bandwidth monitoring tools. A SQL injection vulnerability exists in ZOHO ManageEngine Netflow Analyzer /client/api/json/v2/nfareports/compareReport, which can be exploited by remote attackers to submit a specially crafted SQL request to...

Critical Flaws Found in Widely Used IPTV Software for Online Streaming Services

Security researchers have discovered multiple critical vulnerabilities in a popular IPTV middleware platform that is currently being used by more than a thousand regional and international online media streaming services to manage their millions of subscribers. Discovered by security researchers ...

HPE Intelligent Management Center (IMC) Expression Language Injection Remote Code Execution Vulnerability (CNVD-2019-23744)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A GWT deviceservice queryCustomCondition expression language injection remote code execution vulnerability...

HPE Intelligent Management Center (IMC) sshConfig Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An sshConfig expression language injection remote code execution vulnerability exists in HPE Intelligent...

HPE Intelligent Management Center (IMC) operatorGroupTreeSelectContent Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An operatorGroupTreeSelectContent expression language injection remote code execution vulnerability exists...

HPE Intelligent Management Center (IMC) compareFilesResult Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A compareFilesResult expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) addVsiInterfaceInfo Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An addVsiInterfaceInfo expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) select expression language injection remote code execution vulnerability (CNVD-2019-23777)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A select expression language injection remote code execution vulnerability exists in HPE Intelligent...

HPE Intelligent Management Center (IMC) selViewNavContent Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A selViewNavContent expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) navigationTo Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A navigationTo expression language injection remote code execution vulnerability exists in HPE Intelligent...

HPE Intelligent Management Center (IMC) Expression Language Injection Remote Code Execution Vulnerability (CNVD-2019-23746)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Fault, Configuration, Accounting, Performance and Security FCAPS model. A GWT perfAddFormServer getAddFormBean expression language injection remote code execution vulnerability...

HPE Intelligent Management Center (IMC) perfAddorModDeviceMonitor Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A perfAddorModDeviceMonitor expression language injection remote code execution vulnerability exists in HP...

HPE Intelligent Management Center (IMC) faultFlashEventSelectFact Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A faultFlashEventSelectFact expression language injection remote code execution vulnerability exists in HP...

HPE Intelligent Management Center (IMC) viewTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A viewTaskResultDetailFact expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) deploySelectBootrom Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A deploySelectBootrom expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) viewBatchTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A viewBatchTaskResultDetailFact expression language injection remote code execution vulnerability exists i...

HPE Intelligent Management Center (IMC) Expression Language Injection Remote Code Execution Vulnerability (CNVD-2019-23748)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A GWT deviceservice saveSelectedDevices expression language injection remote code execution vulnerability...