SQL Injection Vulnerability in the Frontend of Medical Online Exam System of Nanjing Pinde Technology Co.

Nanjing Pintech medical online examination system enables users to realize the organization and management of online examination work. SQL injection vulnerability exists in the front-end of Nanjing Pinde Technology's medical online examination system, which can be exploited by attackers to obtain...

cPanel SQL Injection Vulnerability (CNVD-2019-26253)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A SQL injection vulnerability exists in versions prior to cPanel 57.9999.54. The vulnerability stems from a lack of validation of...

CVE-2017-18406

cPanel before 67.9999.103 allows SQL injection during eximstats processing SEC-276...

SQL Injection Vulnerability in Shenzhen Belly Technology's Website Building System

Belly Technology is an innovative company that specializes in web application technology development services, as well as visual design. Shenzhen Belly Technology website building system has SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

SQL Injection Vulnerability in VANOC Enterprise Website Management System Backend

Vanno enterprise website management system PHP version is a php+MySQL development of php enterprise website management system. VANOC enterprise website management system backend has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database information...

SQL Injection Vulnerability in Fiberhome's Eyeshot Series of Network Video Surveillance Platforms

Eyeshot series network video surveillance platform is an integrated video surveillance management system developed by Fiberhome Zongzhi based on IP network technology as the core of large-scale image remote monitoring, transmission, storage and management. Fiberhome Eyeshot series network video...

SQL Injection Vulnerability in DBShop System

DBShop is an e-commerce system. A SQL injection vulnerability exists in the DBShop system, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2019-1010034

Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function "AllBarCodes" defined at databasecode.php line 1018 is vulnerable to a boolean-based blind sql injection. This function call can be triggered by...

SQL Injection Vulnerability in Hongyuan Business CMS

Laiyang Hongyuan E-commerce technology is mainly engaged in enterprise website construction, product promotion, enterprise information management consulting, planning, implementation and other services. Hongyuan Business CMS has SQL injection vulnerability, attackers can use the vulnerability to...

SQL injection vulnerability in the pr***-sh***.asp file of Yueqing Hanke's website builder system.

Yueqing Hanke Network is a company engaged in website construction. A SQL injection vulnerability exists in the pr-sh.asp file of the website building system of Yueqing Hanke Network. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Electronic Service System V2.0 of Gansu Chengxing Information Technology Co.

Gansu Chengxing Information Technology Co., Ltd. developed to meet the needs of various types of public resource transactions, can provide timely, reliable and effective support for the Chengxing public resource trading platform. Gansu Chengxing Information Technology Co., Ltd. electronic service...

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to address the issue of eliminating special elements used in SQL queries. This allows a violator to obtain the contents of the database.

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to take measures to neutralize special elements used in SQL queries. Exploiting this vulnerability can allow an attacker, operating remotely...

SQL Injection Vulnerability in Beijing Night Cat Website Building System

Beijing Nightcats Tiancheng Network Technology Co., Ltd referred to as Nightcats Network, is a professional website design and website construction service provider. There is a SQL injection vulnerability in Beijing Nightcats website building system, which can be exploited by attackers to obtain...

CVE-2019-12149

SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverstripe/registry module 2.1.x before 2.1.1 and 2.2.x before 2.2.1 allows attackers to execute arbitrary SQL commands...

ZOHO ManageEngine Netflow Analyzer SQL Injection Vulnerability

ZOHO ManageEngine Netflow Analyzer is a set of web-based bandwidth monitoring tools. A SQL injection vulnerability exists in ZOHO ManageEngine Netflow Analyzer /client/api/json/v2/nfareports/compareReport, which can be exploited by remote attackers to submit a specially crafted SQL request to...

Critical Flaws Found in Widely Used IPTV Software for Online Streaming Services

Security researchers have discovered multiple critical vulnerabilities in a popular IPTV middleware platform that is currently being used by more than a thousand regional and international online media streaming services to manage their millions of subscribers. Discovered by security researchers ...

SQL Injection Vulnerability in B2C_UQ Cloud Business System (CNVD-2019-18481)

UQ Cloud Business System B2C version is a compact e-commerce system, the platform is developed by PHP7.0+Mysql. B2CUQ Cloud Business System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2019-10123

SQL Injection in Advanced InfoData Systems AIS ESEL-Server 67 which is the backend for the AIS logistics mobile app allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user...

SQL injection vulnerability in Tpshop v3.5 To***.php page (CNVD-2019-17503)

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 To.php page. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in Tpshop v3.5 Us***.php page (CNVD-2019-17500)

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 Us.php page. Attackers can use the vulnerability to obtain sensitive information in the database...