NetVault Backup ClientList Request Processor Code Execution

The vulnerability of the NVBUBackup ClientList request processor in the NetVault Backup data archiving and restoration software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

NetVault Backup Get Request Handler Code Execution

The vulnerability of the NVBUJobDefinition Get request handler in the NetVault Backup data archiving and restoration software lies in the insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

NetVault Backup Count request handler Code Execution

The vulnerability of the NVBUBackup Count request handler in the NetVault Backup data archiving and restoration software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

NetVault Backup NVBUScheduleSet Code Execution

The vulnerability of the NVBUScheduleSet request handler in software for data archiving and restoration by NetVault Backup is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

NetVault Backup Get Request Handler Code Execution

The vulnerability of the NVBUBackupSegment Get request handler in the NetVault Backup data archiving and restoration software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

HPE Network Automation Auth Bypass Privilege Escalation

The vulnerability of the HPE Network Automation system management system is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and gain increased privileges...

NetVault Backup PluginList Request Handler Code Execution

The vulnerability of the NVBUBackup PluginList request processor in the NetVault Backup data archiving and restoration software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

NetVault Backup Get Request Handler Code Execution

The vulnerability of the NVBUBackupOptionSet Get request handler in the NetVault Backup data archiving and restoration software lies in the insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

SQL injection vulnerability in Monxin Forms System \program\talk\show\set_group.php page

Monxin Forms System is an open source program that runs on PHP+MySQL. A SQL injection vulnerability exists in the \program\talk\show\setgroup.php page of Monxin Forms System. An attacker can exploit this vulnerability to obtain sensitive information from the database...

PHPSHE 'userbank' Parameter SQL Injection Vulnerability

PHPSHE is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. A SQL injection vulnerability exists in the 'userbank' parameter in PHPSHE version 1.6. A remote attacker can exploit this vulnerability to execute SQL commands...

CVE-2018-7528

An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data...

Geutebruck IP Cameras SQL Injection Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A SQL injection vulnerability exists in Geutebruck IP Cameras, which allows attackers to exploit the vulnerability to alter stored data...

Kentico SQL Injection Vulnerability

Kentico is the United States Kentico Software Corporation of a set of ASP.NET-based content management system CMS. The system consists of two main tools : Kentico CMS Desk is used to edit the content of the page ; Kentico CMS Controls is used to edit and control various elements of the page . An...

SQL Injection Vulnerability in iReader Digital Resources Remote Access Management System

The iReader Digital Resources Remote Access Management System is a software system specifically tailored for digital library users for patrons to remotely access the library's digital resources. A SQL injection vulnerability exists in the iReader Digital Resources Remote Access Management System...

SQL Injection and Cross-Site Scripting Vulnerabilities in Esmay's Non-Book Resource Management System

Esmay Non-Book Resource Management System can help librarians conveniently manage accompanying books, accompanying CD-ROMs and other non-paper resources, and help patrons directly search, browse online, operate online, partially download, and fully download the CD-ROMs they need. There are SQL...

SQL Injection Vulnerability in MaxCMS Version 4.0

Movie System Max Program MaxCMS is an open source program that specializes in serving the construction of movie websites. MaxCMS version 4.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in cms_admin_edit.php file of VANOC enterprise website management system (PHP version)

Vanno enterprise website management system PHP version is a php+MySQL development of php enterprise website management system. An SQL injection vulnerability exists in the cmsadminedit.php file of the Vanno Enterprise Website Management System PHP Edition. An attacker can exploit the vulnerabilit...

SQL Injection Vulnerability in Taicang Suyi Information Technology Co.

Taicang Suyi Information Technology Co., Ltd. is a technology-oriented enterprise integrating website construction, software development, mobile application development, interface design and system integration. There is a SQL injection vulnerability in the website building system of Taicang Suyi...

EllisLab CodeIgniter SQL Injection Vulnerability

EllisLab CodeIgniter is the United States EllisLab company for PHP web developers to use a set of application development framework and toolkit . A SQL injection vulnerability exists in the offset method of the Active Record class in EllisLab CodeIgniter versions prior to 2.2.4. A remote attacker...

HamayeshNegar CMS signup component SQL injection vulnerability

HamayeshNegar CMS is a content management system. signup component is one of the signup functionality components. A SQL injection vulnerability exists in the users/signup.php file of the signup component in HamayeshNegar CMS. The vulnerability can be exploited by a remote attacker to execute...