LibreHealthIO LH-EHR SQL Injection Vulnerability

LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. A SQL injection vulnerability exists in the Show Groups Popup SQL query function in the LibreHealthIO LH-EHR REL-2.0.0 release. A remote attacker can exploit the vulnerability to execute...

Vulnerability hunting with Semmle QL, part 1

Previously on this blog, we’ve talked about how MSRC automates the root cause analysis of vulnerabilities reported and found. After doing this, our next step is variant analysis: finding and investigating any variants of the vulnerability. It’s important that we find all such variants and patch...

ShopsN open source online store full web system suffers from SQL injection vulnerability (CNVD-2018-17331)

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN v2.3.3 official version of the existen...

SQL Injection Vulnerability in Website Building System of Shanghai Bonning Network Technology Co.

Shanghai Bonning Network Technology Co., Ltd. is a company dedicated to the application and promotion of website building and e-commerce for enterprises and institutions. Shanghai Bonning Network Technology Co., Ltd. website building system has SQL injection vulnerability, attackers can use the...

SQL Injection Vulnerability in Website Building System of Shangyu Tiansheng Network Technology Service Co.

Shangyu Tiansheng Network Technology Service Co., Ltd. is engaged in website construction, website promotion, website SEO optimization, enterprise mailbox, domain name registration, web space, network marketing planning for a full range of solutions. Shangyu Tiansheng Network Technology Service...

SQL Injection Vulnerability in seacms

seacms is a video-on-demand content management system designed for different needs. A SQL injection vulnerability exists in seacms. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Azeus CMS 2.0 Backend

Central CMS 2.0 is a cms system made by Central Studio, this CMS is written in UTF-8 coding. Azeus CMS 2.0 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in EML Enterprise Address Book Management System

EML enterprise customer address book management system, is based on Linux open kernel and Apache based Php + Mysql intelligent B / S interactive service system. EML enterprise address book management system version 5.4.5 there is a sql injection vulnerability , attackers can exploit the...

SQL Injection Vulnerability in the Frontend of Rongguang Information Ordering and Consumption System (荣光信息订取餐消费系统前台存在SQL注入漏洞)

Rongguang Information Ordering and Picking Up Food Consumption System is a multi-functional ordering system developed by Shenzhen Rongguang Information Co. SQL injection vulnerability exists in the frontend of Rongguang Information Ordering and Consumption System, which can be exploited by...

PbootCMS V1.1.7 SQL Injection Vulnerability in Li***.php Page

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Li.php page SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

DEBIAN-CVE-2018-12482

OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit the issues...

SQL Injection Vulnerability in PHPSHE Mall System

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. A SQL injection vulnerability exists in PHPSHE Mal...

Chengdu Innovative Internet Technology Co., Ltd. website building system suffers from SQL injection vulnerability

Chengdu Innovative Internet Technology Co., Ltd. mainly provides customers with high-quality Internet services and technology development and other services. Chengdu Innovative Internet Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by...

SQL Injection Vulnerability in Beijing Weihaiyunshang Technology Mobile Cloud Mall

Ltd. HiShop.cn, continues to specialize in providing e-commerce software and related value-added service products for small and medium-sized enterprises SMEs. It is the earliest and longest lasting leading brand of e-commerce software and service provision in China. A SQL injection vulnerability...

CVE-2017-10937

SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information...

CVE-2017-18104

The Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.11.0 allows remote attackers who are able to observe or otherwise intercept webhook events to learn information about changes in issues that should not be sent because they are not contained with...

OURPHP Background SQL Injection Vulnerability

OURPHP OURPHP Building System is a web content management system developed using the PHP language. A SQL injection vulnerability exists in the backend of OURPHP v1.8.3. Attackers can use the vulnerability to obtain sensitive information from the database...

EyouCms Multiple Pages SQL Injection Vulnerability

Eyou Content Management System EyouCms is developed by php + mysql a set of open source cms dedicated to small and medium-sized enterprise website construction. EyouCms multiple pages exist SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

Msvod Cms SQL Injection Vulnerability

Msvod Cms is a content management system CMS for video-on-demand websites. The system mainly provides services such as video-on-demand and video aggregation website building. A SQL injection vulnerability exists in Msvod Cms version 10. A remote attacker can exploit this vulnerability to execute...

SQL Injection Vulnerability in POSCMS v3.2.0 (Free Edition) A***.php

POSCMS PhpOpenSourceCMS is a set of China Tianrui information technology company developed a set of PHP and MySQL-based, open source, cross-platform Web content management system CMS. POSCMS v3.2.0 free version A.php suffers from a SQL injection vulnerability, which can be exploited by attackers ...