2783 matches found
SQL injection vulnerability in the S_show parameter of the aj***.php page of the S-CMS school website builder system
S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS school website builder system aj.php page Sshow parameter SQL injection vulnerability, an attacker can use the vulnerability to...
S-CMS government website builder system aj***.php page N_type parameter has SQL injection vulnerability
S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions for station building products. S-CMS government website builder system aj.php page Ntype parameter there is a SQL injection vulnerability, an attacker can...
Open-School SQL Injection Vulnerability
Open-School is a Web-based school management software. The software provides online fee collection, attendance and online library features. A SQL injection vulnerability exists in Open-School version 2.3 Community Edition and version 3.0, which stems from a lack of validation of externally entere...
S-CMS in***.php page suffers from a SQL injection vulnerability
S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS in.php page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...
SQL Injection Vulnerability in TXEHR V15 lo***.aspx Page
Dongguan City, the same share software technology limited company is a focus on manufacturing, commercial circulation, government departments, enterprises and institutions, such as management software development and service company. The same share human resources management system-TXEHR V15...
SQL Injection Vulnerability in Several Parameters of ZZCMS Merchants Module
ZZCMS with product investment type template, you can quickly build product investment website. ZZCMS website builder system investment module multiple parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database information...
SQL Injection Vulnerability in the Frontend of Medical Online Exam System of Nanjing Pinde Technology Co.
Nanjing Pintech medical online examination system enables users to realize the organization and management of online examination work. SQL injection vulnerability exists in the front-end of Nanjing Pinde Technology's medical online examination system, which can be exploited by attackers to obtain...
cPanel SQL Injection Vulnerability (CNVD-2019-26253)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A SQL injection vulnerability exists in versions prior to cPanel 57.9999.54. The vulnerability stems from a lack of validation of...
CVE-2017-18406
cPanel before 67.9999.103 allows SQL injection during eximstats processing SEC-276...
SQL Injection Vulnerability in VANOC Enterprise Website Management System Backend
Vanno enterprise website management system PHP version is a php+MySQL development of php enterprise website management system. VANOC enterprise website management system backend has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database information...
SQL Injection Vulnerability in Shenzhen Belly Technology's Website Building System
Belly Technology is an innovative company that specializes in web application technology development services, as well as visual design. Shenzhen Belly Technology website building system has SQL injection vulnerability, attackers can use the vulnerability to obtain database information...
SQL Injection Vulnerability in Fiberhome's Eyeshot Series of Network Video Surveillance Platforms
Eyeshot series network video surveillance platform is an integrated video surveillance management system developed by Fiberhome Zongzhi based on IP network technology as the core of large-scale image remote monitoring, transmission, storage and management. Fiberhome Eyeshot series network video...
SQL Injection Vulnerability in DBShop System
DBShop is an e-commerce system. A SQL injection vulnerability exists in the DBShop system, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2019-1010034
Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function "AllBarCodes" defined at databasecode.php line 1018 is vulnerable to a boolean-based blind sql injection. This function call can be triggered by...
SQL Injection Vulnerability in Hongyuan Business CMS
Laiyang Hongyuan E-commerce technology is mainly engaged in enterprise website construction, product promotion, enterprise information management consulting, planning, implementation and other services. Hongyuan Business CMS has SQL injection vulnerability, attackers can use the vulnerability to...
SQL injection vulnerability in the pr***-sh***.asp file of Yueqing Hanke's website builder system.
Yueqing Hanke Network is a company engaged in website construction. A SQL injection vulnerability exists in the pr-sh.asp file of the website building system of Yueqing Hanke Network. Attackers can use the vulnerability to obtain sensitive information in the database...
SQL Injection Vulnerability in Electronic Service System V2.0 of Gansu Chengxing Information Technology Co.
Gansu Chengxing Information Technology Co., Ltd. developed to meet the needs of various types of public resource transactions, can provide timely, reliable and effective support for the Chengxing public resource trading platform. Gansu Chengxing Information Technology Co., Ltd. electronic service...
SQL Injection Vulnerability in Beijing Night Cat Website Building System
Beijing Nightcats Tiancheng Network Technology Co., Ltd referred to as Nightcats Network, is a professional website design and website construction service provider. There is a SQL injection vulnerability in Beijing Nightcats website building system, which can be exploited by attackers to obtain...
The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to address the issue of eliminating special elements used in SQL queries. This allows a violator to obtain the contents of the database.
The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to take measures to neutralize special elements used in SQL queries. Exploiting this vulnerability can allow an attacker, operating remotely...
CVE-2019-12149
SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverstripe/registry module 2.1.x before 2.1.1 and 2.2.x before 2.2.1 allows attackers to execute arbitrary SQL commands...