Schneider Electric EcoStruxure Operator Terminal Expert SQL Injection Vulnerability

Schneider Electric EcoStruxure Operator Terminal Expert is a touch screen configuration software from Schneider Electric, France. This software branch is mainly used for creating and editing touch applications. A SQL injection vulnerability exists in the handling of VXDZ files in Schneider Electr...

SQL Injection Vulnerability in Employment Information Service Platform of Shanghai Jiading Information Technology Co.

Shanghai A-Ding Information Technology Co., Ltd. is focusing on college cloud employment information service platform products, adhering to the principle of saas, with many high-quality Internet resources as the basis, to establish employment information service cloud platform. Provide humanized,...

CVE-2020-12104

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation...

YouDianCMS suffers from SQL injection vulnerability (CNVD-2020-28103)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability, attackers can use the vulnerability to obtain databas...

Tongda OA suffers from SQL injection vulnerability (CNVD-2020-28123)

Tongda OA is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd, which is a comprehensive management and office platform combined with China's enterprise management practices. There is a SQL injection vulnerability in Tongda OA,...

Guangdong Century ICT Network Technology Co., Ltd Supervision Pass - Supervision Enterprise Comprehensive Business Management System suffers from SQL Injection Vulnerability

Supervision through - supervision enterprise integrated business management system, is the Guangdong Century ICT Network Technology Co., Ltd. for the domestic engineering consulting enterprises engineering supervision, project management, cost, bidding agency, project construction informatization...

Sophos XG Firewall SFOS SQL Injection Vulnerability

Sophos XG firewall and SFOS are both products from Sophos UK.Sophos XG firewall is a next generation endpoint protection and enterprise firewall product.SFOS is an operating system for Sophos firewall products. An SQL injection vulnerability exists in SFOS on Sophos XG Firewall appliances...

TXQPHP Blog suffers from SQL Injection Vulnerability

TXQPHP Blog is a PHP blog system source code suitable for novice practitioners to practice, the system is written using MYSQLI, the front three templates home page, content page, message boards categories. TXQPHP Blog has a SQL injection vulnerability , an attacker can use this vulnerability to...

SQL Injection Vulnerability in Backend Advertisements of Inkoo Online Education Software

Beijing IncuTimes Technology Co., Ltd "IncuTimes", founded in 2015, is a domestic educational products and technology service provider. A SQL injection vulnerability exists in the background advertisement map of Incu online education software, which can be exploited by attackers to obtain sensiti...

SQL Injection Vulnerability in zh***.php Page of Huaxia Chemical Website Builder System

Huaxia chemical network is by Shanghai Danfan network technology limited company founded, is for the chemical industry to provide security, high efficiency, multi-function, system supporting B2B electronic commerce platform of professional website. There is a SQL injection vulnerability in zh.php...

SQL Injection Vulnerability in Heybbs 1.2 re***.php File

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. A SQL injection vulnerability exists in the Heybbs 1.2 re.php file, which can be exploited by attackers to obtain database information...

Jshop applet mall program has SQL injection vulnerability

Jshop small program mall is an open source e-commerce system. Jshop applet mall program has a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in GoWeb Web System

Goodposition Technology Co., Ltd. is a company that provides web application services to users. A SQL injection vulnerability exists in the GoWeb web system, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-11816

Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the reportsid POST parameter...

SQL Injection Vulnerability in Website Building System of Taizhou Qicheng Network Technology Co.

Taizhou Qicheng Network Technology Co., Ltd. is an Internet company engaged in web design, website production, website program development, website optimization/promotion, enterprise mailbox, enterprise management software development. There is a SQL injection vulnerability in the website buildin...

SQL Injection Vulnerability in Jilin Zhongnuo Technology Co.

Jilin Zhongnuo Technology Co., Ltd. is an Internet + technology and service provider. Jilin Zhongnuo Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

ShopsN open source mall system SQL injection vulnerability

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system SQL injection vulnerability ,...

SQL Injection Vulnerability in PatrolFlow of Beijing Byzoro Network Technology Co.

PatrolFlow is a multi-service security gateway intelligent management platform of Beijing Byzoro Network Technology Co. A SQL injection vulnerability exists in PatrolFlow of Beijing Byzoro Networks Technology Co. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Laikepui E-commerce System of Hunan One Eight Network Technology Co. Ltd (CNVD-2020-25309)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. There is a SQL injection vulnerability in the Laike Push e-commerce system of Hunan One Eight Network Technology Co. Ltd, which can be exploited by an attacker to obtain...

SQL Injection Vulnerability in Longmen Technology Website Building System

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. There is a SQL injection vulnerability in the website building system of LongmenTech, which can be exploited by attackers to obtain...