Devellion CubeCart SQL Injection Vulnerability

Devellion CubeCart is a free and open source e-commerce shopping cart software from Devellion UK. The software supports selling products in an online store, adding/editing products or images etc. A SQL injection vulnerability exists in Devellion CubeCart versions prior to 6.1.13, which can be...

SQL Injection Vulnerability in Zoneminder st***.php File

Zoneminder is an open source video surveillance system. A SQL injection vulnerability exists in the Zoneminder st.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Huanuo Technology's Website Building System

Huanuo Technology is an Internet application service provider. A SQL injection vulnerability exists in the Huanuo Technology website builder system. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Aite Lawyer Software Management Platform

Aite Lawyer Software Management Platform is a platform for lawyers' business management and law firm informatization. SQL injection vulnerability exists in Aite Lawyer Software Management Platform...

SQL Injection Vulnerability in Hefei Shujia Network Technology Co.

Hefei Shujia Network Technology Co., Ltd. is specialized in providing e-commerce one-stop solution of Internet technology services. Hefei Shoujia Network Technology Co., Ltd. website building system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in ThinkCMF 2.2.3 cl***.php Page

ThinkCMF is a Chinese content management framework based on PHP+MYSQL. A SQL injection vulnerability exists in the ThinkCMF 2.2.3 cl.php page. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in HuCart ad***.php Page

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version ad.php page SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain database sensitive information...

ShopsN single merchant b2c mall system v2.3.6 has SQL injection vulnerability

ShopsN single merchant b2c mall system is an open source online store system developed using PHP + MySQL. ShopsN single merchant b2c mall system v2.3.6Us.class .php file addressadd function has a SQL injection vulnerability , an attacker can use this vulnerability to obtain the administrator...

SQL Injection Vulnerability in Rabbit Movie CMS

Rabbit TV CMS is an open source content building system. Rabbit Movie CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CVE-2018-19468

HuCart 5.7.4 has SQL injection in getip in system/class/helperclass.php via the X-Forwarded-For HTTP header to the user/index.php?load=login&act=actlogin URI...

SQL Injection Vulnerability in QYKCMS v4.3.2

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS v4.3.2 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SeaCMS SQL Injection Vulnerability (CNVD-2019-08331)

SeaCMS Ocean CMS is a professional open source free PHP film and television system. SeaCMS 6.6.4 suffers from a SQL injection vulnerability, which can be exploited by attackers via the adminmakehtml.php topic parameter...

SQL Injection Vulnerability in Website Building System of Shenzhen Zhongwang Internet Technology Development Co.

Ltd. is a one-stop Internet service provider that focuses on web application development and visual design, supplemented by online interactive brand marketing. There is a SQL injection vulnerability in the website building system of Shenzhen Zhongwang Internet Technology Development Co. Attackers...

vulhub

It is an offensive tool for Web Application. The repository contains a collection of pre-built vulnerable docker environments, including a web application vulnerable to various attacks. The tool is designed to help developers and security researchers test and demonstrate the effectiveness of web...

MetInfo pa***.php file has sql injection vulnerability

MetInfo is a content management system developed using PHP and Mysql. A sql injection vulnerability exists in the MetInfo pa.php file, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in MetInfo fe***.php File

MetInfo is a content management system developed using PHP and Mysql. A SQL injection vulnerability exists in the MetInfo fe.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in free version of Touchmedia Mall system

TouchNet universal mall station-building system is a set of universal station-building system developed by Tianjin TouchNet Technology Co. TouchNet Universal Mall Station Building System free version of the foreground there is a SQL injection vulnerability, the attacker can be customized through...

CVE-2018-18791

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

CVE-2018-18787

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...

CVE-2018-11785

Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, leading to wrong results for a query...