MyuCMS open source content management system In***.php file SQL injection vulnerability

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. MyuCMS open source content management system In.php file SQL injection vulnerability . Attackers can exploit the vulnerability to obtain...

SQL Injection Vulnerability in Youpoint Enterprise Website Management System of Changsha Youpoint Software Technology Co.

YouDian enterprise website management system abbreviated as YouDianCMS system set computer station, cell phone station, micro letter, APP, small program in one, shared space, data synchronization, is the domestic open source five stations in one excellent enterprise building station solutions...

SQL Injection Vulnerability in UQCMS B2B2C E-commerce System

UQCMS is a lightweight shopping software, light application, light deployment, multiple clients with different presentations.PHP+MySql easy to build, Smarty template tags, two open more convenient. Can be used for free for business. UQCMS B2B2C e-commerce system suffers from a SQL injection...

Cisco SD-WAN vManage Web Interface Data Compromise

The vulnerability in the vManage web interface of Cisco’s programmable network architecture involves a lack of protection for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

Progress Software MOVEit Transfer SQL Injection Vulnerability (CNVD-2020-19007)

Progress Software MOVEit Transfer is a suite of file transfer software from Progress Software, USA. A SQL injection vulnerability in the REST API in Progress Software MOVEit Transfer version 2019.1 before 2019.1.4 and version 2019.2 before 2019.2.1 can be exploited by an attacker to access the...

PT-2020-1843 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 3.9 to 6.0.3 Description: The issue is related to a lack of input checks for SQL queries, which might allow an attacker to perform SQL injection attacks against the backend database. This could potentially be exploited by a...

CVE-2020-3934

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

PT-2020-1616

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Reporting Services versions 2012 through 2016 Description A remote code execution issue exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. This could allow an attacker to execute...

Jobberbase SQL Injection Vulnerability (CNVD-2020-04571)

Jobberbase is an open source platform for building job search websites. A SQL injection vulnerability exists in Jobberbase. The vulnerability stems from a lack of validation of externally entered SQL statements in the database-based application. An attacker can exploit this vulnerability to execu...

SQL Injection Vulnerability in Tianjin Enzhong Technology Website Building System

Tianjin Enzhong science and technology development limited company engaged in computer software hardware technology development, consultation, transfer, service. There is a SQL injection vulnerability in the website building system of Tianjin Enzhong Technology, which can be exploited by attacker...

Plone DTML SQL Injection

Plone is free and open source content management system. Plone DTML suffers from SQL injection, which can be exploited by remote attackers to submit a special SQL request to manipulate the database, which can obtain sensitive information or execute arbitrary code...

soccerfield SQL Injection Vulnerability

soccerfield is a small game for cell phones. A SQL injection vulnerability exists in soccerfield. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Magento SQL Injection Vulnerability (CNVD-2020-04822)

Magento is an open source e-commerce framework. Magento has a SQL injection vulnerability that allows remote attackers to submit a special SQL request to manipulate the database, which can be used to obtain sensitive information or execute arbitrary code...

CVE-2020-8592

eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...

HMI/SCADA Equinox Control Expert SQL Injection Unauthorized Access

The vulnerability in HMI/SCADA Equinox Control Expert relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by sending specially crafted SQL queries to the database...

Xiamen Service Cloud Information Technology Co., Ltd. website security dog SQL injection bypass vulnerability

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. There is a SQL injection bypass vulnerability in the Xiamen Service Cloud Information Technology Co. Attackers use the...

CVE-2019-12619

A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could...

Cisco SD-WAN Solution SQL Injection Vulnerability

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An SQL injection vulnerability exists in the web interface of Cisco SD-WAN Solution vManage. The vulnerability stems from insufficient validation of user-supplied input. A remote...

Cisco SD-WAN Solution SQL Injection Vulnerability (CNVD-2020-04036)

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An SQL injection vulnerability exists in the web interface of Cisco SD-WAN Solution vManage. The vulnerability stems from insufficient validation of user-supplied input. An attacker could...

SQL Injection Vulnerability in Jiangmen Pengjiang Kehui Development Co.

Ltd. is a value-added telecommunication service provider offering website construction, WeChat public number service, WeChat small program development, microsite construction, web hosting, web design, program development, enterprise mailbox and website promotion, Flash animation and multimedia...