SQL Injection Vulnerability in Extreme CMS of Langfang Extreme Network Technology Co. Ltd (CNVD-2020-48971)

Extreme CMS is an open source and free PHPCMS web content management system. Ltd. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

MunkiReport SQL Injection Vulnerability (CNVD-2020-42246)

Munkireport is a reporting tool for the Munki software management program. A SQL injection vulnerability exists in the TableQuery.php file in MunkiReport versions prior to 5.6.3. The vulnerability can be exploited by an attacker to execute arbitrary SQL commands by sending a POST request to...

SQL Injection Vulnerability in BEESCMS

BEESCMS adopts PHP+MYSQL is a multi-language system, the content module is easy to expand, and the template style is diversified. BEESCMS SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Suzhou Huzhong Network Technology Co.

Suzhou Huzhong Network Technology Co., Ltd. twelve years to provide website construction services, SEO ranking optimization, website promotion, micro-marketing and other services; mainly serves in Suzhou and surrounding areas of enterprises and institutions. Suzhou HUZZHOU Network Technology Co.,...

SQL Injection Vulnerability in Lizheng 2nd Generation Management Information System of Beijing Lizheng Software Co.

Founded in July 1995, Beijing Rizheng Software Co., Ltd. is a national high-tech enterprise and a "double-soft" software enterprise and software product certified enterprise. Ltd. has a SQL injection vulnerability in its 2nd generation management information system, which can be exploited by...

SQL Injection Vulnerability in 5vshop E-commerce System of Shijiazhuang Zhenhong Network Technology Co.

5vshop belongs to Shijiazhuang Zhenghong Network Technology Co., Ltd, since 2004 has been committed to the enterprise Internet application of related services, engaged in enterprise, personal e-commerce website construction; e-commerce project planning, creativity, operation, to provide a...

Cisco SD-WAN vManage Software SQL Injection Vulnerability (CNVD-2020-42256)

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A SQL injection vulnerability exists in the web management interface in Cisco SD-WAN vManage Software versions prior to 18.4.5 and 19.2.3, which stems from the program failin...

SQL Injection Vulnerability in Nantong Dot Cool Network Technology Co.

Nantong Dot Cool Networks Technology Co. Since its inception, the company has provided many groups of enterprises and listed companies with perfect industry website construction solutions. There is a SQL injection vulnerability in Nantong Dot Cool Network Technology Co., Ltd's Beehive website...

Sichuan Institute of Safety Science and Technology Coal Mine Remote Monitoring Comprehensive Management System 2016 Version Exists SQL Injection Vulnerability

Sichuan Province coal mine remote integrated monitoring system is a system that can realize remote real-time monitoring of coal mine underground sensing data through the Internet and summarize, analyze and alarm the integrated monitoring and management in a timely manner. Sichuan Institute of...

ArticaTech Artica Proxy SQL Injection Vulnerability

ArticaTech Artica Proxy is an open source Artica proxy solution from the French company ArticaTech. A SQL injection vulnerability exists in ArticaTech Artica Proxy Community Edition versions prior to 4.28.030.418. The vulnerability stems from a lack of validation of externally entered SQL...

SQL Injection Vulnerability in IBOS Office (CNVD-2020-41793)

IBOS is a collaborative office management system based on PHP development. The IBOS office system suffers from an SQL injection vulnerability, which can be exploited by attackers to gain access to sensitive database information...

Zhucheng City Three Swords Network Media Co., Ltd. website system has SQL injection vulnerabilities

Zhucheng City Three Swords Network Media Co., Ltd. for the Internet web application development company, which for many customers to establish an online shopping mall web system. There is a SQL injection vulnerability in the website system of Zhucheng City Three Swords Network Media Co., Ltd, whi...

SQL Injection Vulnerability in 3D Indoor Tour System of Zhejiang Yongtuo Information Technology Co.

Zhejiang Yongtuo Information Technology Co., Ltd. is a technology provider focusing on 3D as a presentation method to solve the physical spatial relationship, and is committed to becoming the world's leading 3D visualization enterprise, providing customers and partners with comprehensive services...

SQL injection vulnerability in pr***.asp page of Shijiazhuang Baicheng Network Technology Co.

Shijiazhuang Baicheng Network Technology Co. Shijiazhuang Baicheng Network Technology Co., Ltd. building system pr.asp page SQL injection vulnerability exists. Attackers can use the vulnerability to obtain sensitive database information...

SQL injection vulnerability in sh***.asp page of website building system of Liaocheng City Sky Network Technology Co.

Ltd. provides one-stop online marketing planning, training, website construction, website production, website optimization, Baidu optimization, site optimization, keyword ranking, promotion, operation, SEO optimization and other e-commerce solutions, is committed to serving the vast number of sma...

Cisco SD-WAN vManage Software SQL Injection Vulnerability

Cisco SD-WAN vManage Software is a software-defined wide area network SD-WAN configuration management software provided by Cisco to monitor and manage an organization's SD-WAN routers. An SQL injection vulnerability exists in Cisco SD-WAN vManage Software versions prior to 19.2.2 and prior to...

SQL Injection Vulnerability in the Co***.cl***.php File of Nethub's Chinese/English Enterprise Website Management System

Netizen Chinese and English enterprise website management system is developed with PHP + MYSQL technology and MVC mode, easy to maintain the code, support pseudo-static function, can generate google and baidu map, support custom url, keywords and description, in line with SEO standards. Nethub...

Siemens Opcenter Execution Core Access Control Error Vulnerability

Opcenter Execution Core formerly known as Camstar Enterprise Platform is a general purpose Manufacturing Execution System MES. A SQL injection vulnerability exists in Siemens Camstar Enterprise Platform and Opcenter Execution Core. An attacker could exploit the vulnerability to view internal...

CVE-2020-7577

A vulnerability has been identified in Camstar Enterprise Platform All versions, Opcenter Execution Core All versions V8.2. Through the use of several vulnerable fields of the application, an authenticated user could perform an SQL Injection attack by passing a modified SQL query downstream to th...

CVE-2020-7577

A vulnerability has been identified in Camstar Enterprise Platform All versions, Opcenter Execution Core All versions V8.2. Through the use of several vulnerable fields of the application, an authenticated user could perform an SQL Injection attack by passing a modified SQL query downstream to th...