Nagios XI 'Manage Users' SQL Injection Vulnerability

Nagios XI is an IT infrastructure monitoring solution. The solution supports monitoring and alerting of applications, services, operating systems and more. A SQL injection vulnerability exists in Nagios XI 'Manage Users'. An attacker can exploit this vulnerability to execute illegal SQL commands...

Vulnerability fixed in Nexpose

A vulnerability has been fixed in Nexpose. The vulnerability allows an authenticated malicious party to execute an SQL injection to execute and thereby obtain sensitive data. Rapid7 has released updates to fix the vulnerability. More information can be found on the page below:...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59409)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Shield Spirit Original Article Submission System 1.0

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

vulhub1

It is an offensive tool for web application vulnerability training. The target product/service or framework is not explicitly stated, but the repository contains various vulnerable environments based on Docker-Compose, including Flask, Git, InfluxDB, and more. The vulnerability class/vector is no...

SQL Injection Vulnerability in Pinecone Enterprise Website System

Pinecone enterprise website system is an asp+access for development at the same time to support the mobile terminal and pc terminal asp enterprise website source code. Pinecone enterprise website system has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in the Management Platform of Internet Service Establishments of Harbin Zhonglong Baiying Technology Development Co.

Harbin Zhonglong Baiying Technology Development Co., Ltd. was founded on May 29, 2013, mainly engaged in computer hardware and software, office automation equipment, security equipment and so on. Harbin Zhonglong Baiying Technology Development Co., Ltd. has a SQL injection vulnerability in the...

SQL Injection Vulnerability in Shield Spirit Original Article Submission System 1.0 Backend

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in UFIDA U8-OA

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in JfinalOA

JfinalOA is a set of open source office OA system development framework. JfinalOA SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2020-13505

Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability...

CVE-2020-8887

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php aka the server login page...

ZZCMS 2020 Frontend SQL Injection Vulnerability

ZZCMS is a content management system for Webmaster Merchants. A SQL injection vulnerability exists in the ZZCMS 2020 frontend, which can be exploited by attackers to obtain sensitive information from the database...

openSIS SQL Injection Vulnerability

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the email parameter in EmailCheck.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

SQL Injection Vulnerability in the Website Building System of Longcheng Internet Wenzhou Network Company (CNVD-2020-54843)

Wenzhou Longcheng Internet Technology Co., Ltd - is engaged in website construction, website production, website design, graphic design, website optimization, website promotion, album design and other integrated Internet companies. Long Cheng Internet Wenzhou Network Company website building syst...

SQL Injection Vulnerability in phpweb finished website builder system

PHPWEB system is developed with PHP+MYSQL technology, with clear architecture and easy-to-maintain code. Support pseudo-static function, can generate google and baidu map, support keywords and descriptions, in line with SEO standards. phpweb finished website builder system has a SQL injection...

Travel Management System SQL Injection Vulnerability

Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that arises from a database application that lacks validation of externally entered SQL statements. An attacker could exploit this vulnerability to execute illegal SQL...

SQL Injection Vulnerability in Website Building System of Linyi Xinbao Network Technology Co. Ltd (CNVD-2020-51582)

Linyi Xinpao Network Technology Co., Ltd. is a company that provides website construction, software development and services, e-commerce, website operation, network marketing and promotion; network technology training consulting and information services; corporate image marketing planning,...

SQL Injection Vulnerability in Dongsheng Logistics System of Qingdao Dongsheng Weiye Software Co. Ltd (CNVD-2020-50754)

Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004 formerly known as Qingdao Jinghong Logistics Information Technology Co., Ltd., the company's main business scope for shipping logistics-related products and services. A SQL injection vulnerability exists in Qingdao Dongsheng...

SQL Injection Vulnerability in CMS Backend of Luoyang Yunye Information Technology Co.

Yunye CMS enterprise building system is a php open source cms specialized in small and medium-sized enterprise website construction. Luoyang Yunye Information Technology Co., Ltd. Yunye CMS background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive informatio...