166 matches found
CVE-2022-30113
Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...
CVE-2022-30113
The CVE-2022-30113 entry concerns the Electronic mall system 1.0_build20200203, which is affected by a SQL Injection vulnerability. Public summaries in connected documents consistently identify the affected product/version and the vulnerability type, with an accompanying high-severity CVSS v3.1 s...
PT-2022-20007
Name of the Vulnerable Software and Affected Versions Electronic mall system version 1.0 build20200203 Description The issue is related to SQL Injection. Recommendations For Electronic mall system version 1.0 build20200203, at the moment, there is no information about a newer version that contain...
CVE-2022-30113: Improper Neutralization of Special Elements used in an SQL Command
Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...
Electron SQL Injection Vulnerability
Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and can be used to write cross-platform desktop applications using HTML, CSS. A security vulnerability exists in Electronic mall system versio...
ECTouch SQL Injection Vulnerability
ECTouch is an application. An open source mobile mall system to create an enterprise exclusive mobile mall. ECTouch suffers from a SQL injection vulnerability, which originates from the SQL injection vulnerability in ECTouch v2 generated through the integralmin parameter in index.php. An attacker...
CVE-2020-21394
SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...
CVE-2020-21394
SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...
CVE-2020-21394
The CVE-2020-21394 entry applies to Zhongbang CRMEB Mall System (open source) v2.60 and v3.1, where SQL injection is possible through the tablename parameter in SystemDatabackup.php. The underlying issue is a SQL injection vulnerability that can lead to unauthorized SQL commands with high impact ...
CVE-2020-21394
SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...
CVE-2020-21394: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...
PT-2021-10622
Name of the Vulnerable Software and Affected Versions: Zhong Bang Technology Co., Ltd CRMEB mall system versions 2.60 through 3.1 Description: The issue is related to a SQL Injection vulnerability. It can be exploited via the tablename parameter in the SystemDatabackup.php file. Recommendations:...
Jinan Ai Cheng Network Technology Co., Ltd. iWebShop open source mall system with command execution vulnerabilities
iWebShop open source mall system is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source free mall system . Jinan Ai Cheng Network Technology Co., Ltd. iWebShop open source mall system there is a command execution vulnerability , attackers can...
iWebShop open source mall system SQL injection vulnerability
iWebShop open source mall system is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source free mall system . iWebShop open source mall system SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database...
Guangxi Guitian Energy Group Company Limited Guitian Gas Mall System Logic Flaw Vulnerability
Guangxi Guitian Energy Group Co., Ltd. is the main LPG comprehensive service enterprise in Guangxi. The products cover: service system, cylinder traceability system. It involves many industries such as gas station, LNG filling station, industrial gas station, chemical polymer new material...
Zhejiang WoSmith Information Technology Co., Ltd. WoSmith list store mall system file contains vulnerabilities
Zhejiang WoSmith Information Technology Co., Ltd. is a technology company specializing in mobile Internet technology development. Zhejiang WoSmith Information Technology Co., Ltd. WoSmith list store mall system file contains a vulnerability that can be exploited to obtain server privileges...
XML Entity Injection Vulnerability in oscshop2 Backend
oscshop2 is an open source free B2C mall system designed using thinkphp5, including micro-channel cell phone, follow the Apache2 open source agreement release. oscshop2 backend XML entity injection vulnerability exists . Attackers can use the vulnerability to obtain sensitive information...
CVE-2020-18020
SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...
Sql injection
SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...
CVE-2020-18020
SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...