S-CMS SQL Injection Vulnerability (CNVD-2018-26679)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in S-CMS version 1.0, which can be exploited by remote attackers to execute SQL commands by sending the 'Sid' parameter to the wapindex.php?type=newsinfo URL...

SQL Injection Vulnerability in File System Profile Frontend ge***.aspx Page

The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the front-end ge.aspx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in PHPMyWind si***_up***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind siup.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

Zzzphp V1.5.9 SQL Injection Vulnerability in Background sa***.php File

zzphp is a free website building system developed using PHP. Zzzphp V1.5.9 SQL injection vulnerability exists in the background sa.php file, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in PHPMyWind in***_up***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind inup.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in PHPMyWind na***_up***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind naup.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in PHPMyWind we***_up***.php File

PPMyWind is a PHP + MySQL based development of W3C-compliant building engine . A SQL injection vulnerability exists in the PHPMyWind weup.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

Yeswiki Cercopitheque SQL Injection Vulnerability

Yeswiki Cercopitheque is a Wiki system written in PHP. The system is mainly used to create and manage websites in a collaborative way. A SQL injection vulnerability exists in the 'Bazar' page in Yeswiki Cercopitheque 2018-06-19-1 and earlier versions. A remote attacker can exploit the vulnerabili...

SQL Injection Vulnerability in PbootCMS Backend

PbootCMS is a new core open source enterprise building system developed by Avantech. There is a SQL injection vulnerability in PbootCMS backend. Attackers can use this vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in UFIDA uMall

UFIDA U Mall realizes multi-dimensional product management, personalized shopping experience, comprehensive membership management, flexible marketing management, online and offline integration, and omni-channel O2O marketing solutions. A SQL injection vulnerability exists in UFIDA U Mall. An...

SQL Injection Vulnerability in Golden Magpie T3 Wooden Door Enterprise Management Software

Golden Magpie T3 series of wooden door software is developed by Nanjing Golden Magpie Software Technology Co., Ltd. and adopts the B/S architecture mode of an enterprise management system. Golden Magpie T3 Wooden Door Enterprise Management Software has a SQL injection vulnerability, which can be...

AbiSoft Ticketly SQL Injection Vulnerability

AbiSoft Ticketly is a PHP and MySQL based ticketing software from AbiSoft in the Republic of Guatemala. A SQL injection vulnerability exists in AbiSoft Ticketly version 1.0, which can be exploited by remote attackers to execute arbitrary SQL commands with the help of multiple parameters...

SQL Injection Vulnerability in Enzong Technology's Website Building System

Tianjin EnZhong Technology Development Co., Ltd. is a network application service operator and a top Internet industry solution company in China. There is a SQL injection vulnerability in EnZone's website building system, which can be exploited by attackers to obtain sensitive information from th...

HuCart has a file upload vulnerability

HuCart is a PHP+Mysql based enterprise building system CMS that can run on various server platforms such as Linux and Windows. HuCart has a file upload vulnerability that can be exploited by attackers to upload arbitrary files...

S-CMS News Portal System SQL Injection Vulnerability in Frontend ne***/fo***.php Page

S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. A SQL injection vulnerability exists in the front-end ne/fo.php page of the S-CMS news portal system. An attacker can exploit the vulnerability to obta...

S-CMS government website builder system SQL injection vulnerability in front-end go***/fo***.php page

S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions for station building products. There is a SQL injection vulnerability in the front-end go/fo.php page of S-CMS government website builder system. Attackers...

Dandelion Online Teaching System frontend ex*** routing file has SQL injection vulnerability

Dandelion Online Teaching System is the website of Shenzhen Tomorrow See Technology Co., Ltd, which is an innovative science and technology enterprise focusing on the research and development of videoconferencing, video teaching and telemedicine system. Dandelion Online Teaching System has a SQL...

SQL injection vulnerability in the or***.de***.php file in the background of Cloud EC e-commerce system

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system background or.de.php file SQL injection vulnerability. Attackers can use the...

SQL Injection Vulnerability in HuCart ar***.php Page

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version ar.php page SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in PhpMywind we***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind we.php file. An attacker can exploit this vulnerability to obtain sensitive database information...