CVE-2019-4752

IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-e...

SQL Injection Vulnerability in SemCMS SE***_Pr***.php File

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEPr.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Feitian Download System

Flying download system FTDMS is the use of template engine caching technology development of a set of information or resource management system, the system uses the original ecological code structure, did not introduce any framework. A SQL injection vulnerability exists in FTDMS. An attacker can...

SQL Injection Vulnerability in SemCMS SE***_Do***.php File

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEDo.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

PHPGurukul Hostel Management System SQL Injection Vulnerability

PHPGurukul Hostel Management System is a hostel management system. A SQL injection vulnerability exists in version v2.0 of the PHPGurukul Hostel Management System. The vulnerability stems from a database-based application that lacks validation of externally entered SQL statements. An attacker can...

Shantou Sanyu Technology Co., Ltd. website building system suffers from SQL injection vulnerability.

Ltd. is a company that focuses on designing, producing and providing personalized e-commerce solutions for enterprises. Ltd. website building system suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Bypass Vulnerability in CloudLock Server-Side Windows Version (Public Cloud Version)

CloudLock is the leading hosting security solution that supports real-time, batch and remote security management of windows/linux servers across multiple platforms. SQL injection bypass vulnerability exists in the Windows version public cloud version of CloudLock's server side, which can be...

Multiple SQL Injection Vulnerabilities in SuiteCRM

SuiteCRM is a free and open source customer relationship management application. Multiple SQL injection vulnerabilities exist in SuiteCRM. An attacker could exploit to obtain sensitive information...

SQL Injection Vulnerability in Liangjing Mall Online Shop Shopping System

Liangjing Mall online store shopping system is a set of multi-functional online store system that can fit different types of commodities, super flexible, three-tier distribution PC+mobile+micro-site, which provides a complete online store solution. There is a SQL injection vulnerability in...

Simplejobscript.com SJS SQL Injection Vulnerability

Simplejobscript.com SJS is a WEB based recruitment application service program. A SQL injection vulnerability exists in Simplejobscript.com SJS, which stems from a lack of validation of externally entered SQL statements in database-based applications and can be exploited by an attacker to execute...

SQL Injection Vulnerability in EmpireCMS Li***.php File

EmpireCMS is a content management system CMS. An SQL injection vulnerability exists in the EmpireCMS Li.php file, which can be exploited by attackers to obtain sensitive information...

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10174)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CVE-2020-3937

SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database...

SQL Injection Vulnerability in MediPro's Township Government Portal System

MediPro Township Government Portal System is a website suitable for township government agencies to create local portals to publicize local resources, realize open government affairs and promote township grassroots informatization. A SQL injection vulnerability exists in MediPro Township Governme...

SQL Injection Vulnerability in Qinhuangdao Business View Technology Co.

Qinhuangdao Business View Technology Co., Ltd, the main business is web design, website production, website design, website optimization, mass mailing software and so on. Qinhuangdao Shangjing Technology Co., Ltd. website building system suffers from a SQL injection vulnerability, which can be...

Online TV Database SQL Injection Vulnerability

Online TV Database is a set of online TV program database. A SQL injection vulnerability exists in the 'ID' parameter in Online TV Database version 2011. The vulnerability stems from a database-based application that lacks validation of externally entered SQL statements. An attacker can exploit...

PHPGurukul Small CRM SQL Injection Vulnerability

PHPGurukul Small CRM is a customer relationship management system. A SQL injection vulnerability exists in the /in.php file in version v2.0 of PHPGurukul Small CRM. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker c...

CVE-2019-20179

SOPlanning 1.45 has SQL injection via the userlist.php "by" parameter...

SQL Injection Vulnerability in ASP Free Version of VANOC Enterprise Website Management System

Vanno Enterprise Website Management System is a website content management system based on a full DIV+CSS template. VANOC Enterprise Website Management System ASP Free Edition suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in the Background Administration C***t.asp Page of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system background management Ct.asp page there is a SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...