Craigrodway Classroombookings SQL Injection Vulnerability

Craigrodway Classroombookings is a Php, Mysql based school room booking system by Craigrodway Individual Developer. A SQL injection vulnerability exists in Craigrodway Classroombookings versions prior to 2.4.1, which originates from injecting SQL via the username field of a CSV file when adding a...

UBUNTU-CVE-2020-26417

Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions =13.6 to =13.5 to =13.1 to 13.4.7...

PT-2020-17197 · Cyberoam · Cyberoamos

Name of the Vulnerable Software and Affected Versions: Cyberoam OS versions prior to 2020-12-04 Description: An SQL injection vulnerability in the WebAdmin of Cyberoam OS allows unauthenticated attackers to execute arbitrary SQL statements remotely. Recommendations: For versions prior to...

Sophos Cyberoam OS SQL注入漏洞

Sophos Cyberoam OS is an operating system for Cyberoam devices from Sophos, USA. A SQL injection vulnerability exists in Sophos Cyberoam OS version 2020-12-04, which stems from a SQL injection vulnerability in WebAdmin that can be exploited by an attacker to remotely execute arbitrary SQL...

SQL Injection Vulnerability in FOCUS Cloud Platform

Shandong Yili Information Technology Co., Ltd. business scope includes: computer hardware and software and auxiliary equipment development, sales, technical consulting, technical services and so on. FOCUS Cloud Platform has a SQL injection vulnerability that can be exploited by attackers to obtai...

Siemens XHQ SQL注入漏洞

Siemens XHQ is a software platform that aggregates plant or pipeline operational data, processes it in a goal-oriented manner, and then makes decisions in real time to effectively improve plant or pipeline operational performance. A SQL injection vulnerability exists in Siemens XHQ versions prior...

SQL Injection Vulnerability in Website Building System of Yuanqi Technology (Beijing) Co.

Ltd. was founded in May 2014, is committed to become a "private cloud-based service provider of a new generation of enterprise information management system". A SQL injection vulnerability exists in the website building system of Yuanqi Technology Beijing Co., Ltd, which can be exploited by...

BloodX SQL Injection Vulnerability

Diveshlunker Bloodx is a Php-based website builder for blood bank management by the individual developer Diveshlunker. BloodX version 1.0 suffers from a SQL injection vulnerability that can be exploited by attackers to bypass authentication...

hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized...

Online Doctor Appointment Booking System SQL注入漏洞

Online Doctor Appointment Booking System is a web-based online appointment booking system from PHP Scripts Mall Php Scripts Mall, India. Online Doctor Appointment Booking System suffers from a SQL injection vulnerability that originates from a SQL injection vulnerability in the getuser.php...

ZXELINK ZXV10 W908 SQL Injection Vulnerability

The ZXV10 W908 is a wireless access controller from ZXELINK. A SQL injection vulnerability exists in versions prior to ZXELINK ZXV10 W908 MIPSA1022IPV6R3T6P7Y20. The vulnerability stems from the device failing to properly filter parameters. An attacker can exploit the vulnerability by sending...

Diveshlunker Bloodx SQL注入漏洞

Diveshlunker Bloodx is a Php-based website builder for blood bank management by the individual developer Diveshlunker. BloodX version 1.0 suffers from a SQL injection vulnerability that can be exploited by attackers to bypass authentication...

SQL Injection Vulnerability in Enping Wanshang Web Design Studio's Website Building System

Enping Wanshang Web Design Studio was founded in September 2016, and its business scope includes web design and website construction. There is a SQL injection vulnerability in the website building system of Wanshang Web Design Studio in Enping City, which can be exploited by attackers to obtain...

Vulnerability of the Server component: The X Plugin of the MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

SQL Injection Vulnerability in Bo Yun CD-ROM System of Hangzhou Maida Electronics Co.

Hangzhou Maida Electronics Co., Ltd. provides professional library systems, including search, storage, access and other functions, customers involved in the domestic major universities and provincial and municipal libraries. A SQL injection vulnerability exists in Bo Yun CD-ROM system of Hangzhou...

SQL Injection Vulnerability in TEMMOKUMVC of Pizhou Tianmu Network Technology Co.

TEMMOKUMVC is Pizhou Tianmu Network Technology Co., Ltd. developed a professional PHP + MYSQL products, using the independent MVC framework for large and small and medium-sized enterprises of the open source MVC. Pizhou Tianmu Network Technology Co., Ltd TEMMOKUMVC SQL injection vulnerability,...

UFIDA NC suffers from SQL injection vulnerability (CNVD-2020-69451)

UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from the database...

hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized...

VMware VMWare SD-WAN Orchestrator SQL Injection Vulnerability

VMware VMWare SD-WAN Orchestrator is a software for orchestrating network data flows in a software-defined network architecture. A SQL injection vulnerability exists in VMware VMWare SD-WAN Orchestrator, which can be exploited by a remote attacker to submit a special SQL request to manipulate a...

SQL Vulnerability in KKCMS

KKCMS is an open source video capture and playback system. The system is mainly used to automatically collect film and television resources and provide online playback capabilities. KKCMS has a SQL vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...