CVE-2016-1000125

Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla...

CVE-2016-1000123

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...

PHPIPAM SQL Injection Vulnerability

phpipam is a set of open source PHP and MySQL based IP address management application IPAM. A cross-site scripting vulnerability exists in phpipam version 1.2.1, which can be exploited by an attacker to compromise the application, access or modify data, or exploit potential vulnerabilities in the...

Joomla! com_bt_media Component SQL Injection Vulnerability

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A SQL injection vulnerability exists in the categories0 parameter of the index/php page of the Joomla! combtmedia...

kensoft CMS SQL Injection Vulnerability

kensoft CMS is a content management system. A SQL injection vulnerability exists in the ft parameter of the dispatch.php page of kensoft Cms, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in UFIDA Financials /target/services/operOriztion?wsdl Page

UFIDA Financials is a financial management software. A SQL injection vulnerability exists in the UFIDA Financial System /target/services/operOriztion?wsdl page. An attacker can exploit the vulnerability to obtain database information...

SQL injection vulnerability in the zwkm parameter of the modifyzdjb.jsp page of the ilasIII digital library system of Shenzhen Ketu Automation New Technology Application Company.

Integrated Library Automation System ILAS is the Ministry of Culture in 1988 as a national key scientific and technological projects issued by the Shenzhen Library to undertake and organize the development of a set of libraries at home and abroad to adapt to different levels, a variety of scales,...

vBulletin forumrunner/includes/moderation.php SQL Injection Vulnerability

VBulletin is a powerful, flexible and fully customizable suite of forum programs. A SQL injection vulnerability exists in the forumrunner/includes/moderation.php file in versions of vBulletin prior to 4.2.2 Patch Level 5 and prior to 4.2.3 Patch Level 1. A remote attacker can exploit this...

SQL Injection Vulnerability in Asset Management System sysbh Parameter of Jinan Guozi Digital Technology Co.

Asset management system of Jinan Guozi Digital Technology Co., Ltd. is a set of sharing and management platform for precision instruments or large instruments. The product suffers from SQL injection vulnerability, the vulnerability URL is: http://host/dxyqsyspt/sysDetail.aspx?sysbh=000001 The...

SQL Injection Vulnerability in Channelcode Parameter of Hopping Synergy Content Management System

HZCMS is a website group content management system based on Java and XML technology. A SQL injection vulnerability exists in the channelcode parameter of the HZCMS. An attacker can exploit the vulnerability to obtain database information...

SQL Injection Vulnerability in the Templetid Parameter of Hopping Collaborative Content Management System

HZCMS is a website group content management system based on Java and XML technology. A SQL injection vulnerability exists in the templetid parameter of HZCMS. Attackers can use the vulnerability to obtain data information...

SQL Injection Vulnerability in hdcms Framework rname Parameter

HDCMS is a content management system package written in PHP. A SQL injection vulnerability exists in the rname parameter of the hdcms framework, as the program fails to adequately filter the rname parameter and only does corresponding code auditing on the source code. An attacker is allowed to...

SQL Injection Vulnerability in Doccms

Rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free open source enterprise website building system, enterprise website generation system. Doccms SQL injection vulnerability , due...

PHPBack SQL Injection Vulnerability

PHPBack is an open source Web application feedback system . PHPBack suffers from a SQL injection vulnerability that allows remote attackers to exploit the vulnerability to submit specially crafted SQL queries to manipulate or obtain database data...

LG NAS N1A1 has multiple security vulnerabilities

The LG NAS N1A1 is a network storage device developed by the South Korean Lakin LG Group. Arbitrary file upload/download, security bypass, SQL injection, and unauthorized operation vulnerabilities exist in the Familycast service in the LG NAS N1A1 version 10119, which can be exploited by an...

Generalized SQL Injection Vulnerability in Abilify Multiservice Smart Gateway

Abilify Multi-service Smart Gateway is a product of Beijing Hai Rui Xing Ye Technology Co. A generic SQL injection vulnerability exists in Abilify Multi-service Smart Gateway. It allows attackers to utilize common SQL injection tools to obtain sensitive database information...

Generalized SQL Injection Vulnerability in Agricultural Network of Wuhan Joseph Xin Sun Agricultural Network Co.

Wuhan Joseph Xin Sun Agricultural Network Co., Ltd. is mainly engaged in computer network information software research and development, electronic complete sets of equipment research and development; business information consulting; business information consulting; sales of primary agricultural...

SQL Injection Vulnerability in BoZone Travel Distribution System

Wuhan Bozhong E-commerce Co., Ltd. is a new technology-based enterprise specializing in travel agency management software development and sales, website production, and customized development of SME management system. A SQL injection vulnerability exists in the BoZone Travel Distribution System...

SQL Injection Vulnerability in the Comprehensive Information Portal System of Nanjing Normal University Finance Department

Nanjing Normal University Finance Department comprehensive information portal system is a set of financial management platform. SQL injection vulnerability exists in Nanjing Normal University Finance Department Comprehensive Information Portal System, which can be exploited by attackers to obtain...

IBM Marketing Platform SQL Injection Vulnerability (CNVD-2016-03333)

IBM Marketing Platform is a suite of marketing platforms from IBM in the United States. The platform supports marketers in leveraging and analyzing customer interactions on websites, cell phones and social media to deliver targeted marketing campaigns to customers. A SQL injection vulnerability...