Advantech WebAccess/SCADA SQL Injection Vulnerability

Advantech WebAccess is a browser-based HMI software package for human machine interfaces, as well as monitoring and data acquisition SCADA. A SQL injection vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to obtain sensitive information about a database...

Web Security Dog (Apache Edition) V4.0 suffers from SQL Injection Vulnerability

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition V4.0 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability...

SQL Injection Vulnerability in Dispnews.asp Page of Website Construction System of Jingmen Xinnet Technology Development Co.

Jingmen City, Xin network technology development limited company is a network brand marketing and enterprise management information technology professional service providers. There is a SQL injection vulnerability in the dispnews.asp page of the website construction system of Jingmen Xinnet...

SQL Injection Vulnerability in Xi'an Hongbo Network Technology Co.

Xi'an Hongbo Network Technology Co., Ltd. is a professional design team integrating network preparation, digital film and television production, and brand visual design. Xi'an Hongbo Network Technology Co., Ltd. website construction system suffers from SQL injection vulnerability. Attackers can...

CVE-2017-1670

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 133637...

Gespage SQL Injection Vulnerability

Gespage is an application for managing and monitoring printing devices from the French company Gespage. A SQL injection vulnerability exists in Gespage. A remote attacker can exploit this vulnerability by sending the 'showprn' parameter to the webapp/users/prnow.jsp file or the 'showmonth'...

OpenText Document Sciences xPression xDashboard SQL Injection Vulnerability

OpenText Document Sciences xPression formerly EMC Document Sciences xPression is a suite of document output management and customer communication solutions from OpenText Canada, Inc. The solution integrates an organization's Customer Relationship Management CRM, Enterprise Content Management ECM,...

SQL Injection Vulnerability in phpaaCMS article.add.php File

phpaaCMS is a simple article management system. A SQL injection vulnerability exists in the phpaaCMS article.add.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37642)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUTransferHistory Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37634)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUBackup ClientList method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37630)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability exists in the handling of NVBUBackup Get method requests in Quest NetVault Backup versions prior to 11.4.5, which stems from the program failing to properly detect user-submitted strin...

FS Quibids Clone SQL Injection Vulnerability

FS Quibids Clone is a set of online auction website scripts based on PHP and MySQL. A SQL injection vulnerability exists in FS Quibids Clone version 1.0. A remote attacker can inject SQL commands by sending the 'productid' parameter to the itechd.php file...

PHP Scripts Mall Doctor Search Script SQL Injection Vulnerability

PHP Scripts Mall Doctor Search Script is a PHP based online doctor search website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Doctor Search Script version 1.0. The vulnerability can be exploited by a remote attacker to inject SQL commands by sending...

PHP Scripts Mall Freelance Website Script SQL Injection Vulnerability

PHP Scripts Mall Freelance Website Script is a set of PHP based freelance online job search, recruitment website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Freelance Website Script version 2.0.6. The vulnerability can be exploited to inject SQL...

PHP Scripts Mall Event Search Script SQL Injection Vulnerability

PHP Scripts Mall Event Search Script is a PHP based online event registration script from PHP Scripts Mall India. The script can be embedded into a website and accept online event bookings from other organizations or companies. A SQL injection vulnerability exists in PHP Scripts Mall Event Search...

SQL Injection Vulnerability in Website Building System of Suzhou Leyi Network Technology Co.

Suzhou Leyi Network Technology Co., Ltd. is a network company specializing in enterprise website construction and e-commerce services, providing network promotion and marketing in one of the professional services. Suzhou Leyi Network Technology Co., Ltd. website building system SQL injection...

Dongguan Golden Drum Network Technology Co., Ltd. website construction system has SQL injection vulnerabilities

Dongguan Golden Drum Network Technology Co., Ltd. is a network company, specializing in the field of website design and Internet marketing. Dongguan Golden Drum Network Technology Co., Ltd. website construction system has a SQL injection vulnerability, attackers can use the vulnerability to obtai...

SQL Injection Vulnerability in ThinkLC Classifieds Information System biz.php Page

ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the ThinkLC Classifieds Information System biz.php page. The vulnerability is caused due to the system failing to effectively filter user-submitte...

IBM Atlas eDiscovery Process Management SQL Injection Vulnerability

IBM Atlas eDiscovery Process Management is a product within the Information Lifecycle Governance solution from IBM USA that is used to help attorneys, paralegals, and evidence supervisors rigorously and logically manage legal evidence retention workflows. A SQL injection vulnerability exists in I...

SQL Injection Vulnerability in DuoDuo Rebate System V8.3_UTF8 official version admin\mod\goods\list.act.php

DuoDuo rebate system is for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuo rebate web system V8.3UTF8 official version admin\mod\goods\list.act.php SQL injection vulnerability. The vulnerability is due to the system failing to effectively...