CVE-2020-5617

Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unauthorized privileges and modify/obtain sensitive information or perform unintended operations via unspecified vectors...

SQL Injection Vulnerability in Aisino Corporation Grain Reserve System

Founded in November 2000, Aisino Corporation is an IT industry company with information security as its core technology, held by China Aerospace Science and Industry Corporation. An SQL injection vulnerability exists in the Aisino Corporation's grain reserve system, which can be exploited by...

Xi'an Bailian Network Technology Co., Ltd. Bailian network mall system has SQL injection vulnerability

BaiLian mall system is a set of computer version of the mall + cell phone version of the website + micro-mall enterprise weibo public number secondary development + BaiLian bearing network professional promotion and publicity in one of the new marketing solutions. Xi'an Bailian Network Technology...

BEESCMS suffers from SQL injection vulnerability (CNVD-2020-48932)

BEESCMS adopts PHP+MYSQL, featuring multi-language system and easy expansion of content modules. BEESCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in p***.php file of website building system of Anyang Zhidao Media Co.

Founded in 2011, Anyang Zhidao Media Co., Ltd. is a formal and professional Anyang network company engaged in Internet business and software development. Anyang Zhidao Media Co., Ltd. building system p.php file SQL injection vulnerability, attackers can use the vulnerability to obtain database...

SQL Injection Vulnerability in 5vshop E-commerce System of Shijiazhuang Zhenhong Network Technology Co.

5vshop belongs to Shijiazhuang Zhenghong Network Technology Co., Ltd, since 2004 has been committed to the enterprise Internet application of related services, engaged in enterprise, personal e-commerce website construction; e-commerce project planning, creativity, operation, to provide a...

CVE-2020-9665

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

SQL Injection Vulnerability in Dr.ID Access Control and Time Attendance System of ZTE Security Co.

Dr.ID Access Control & Time Attendance System is a system of ZTE Security Co. Dr.ID Access Control & Attendance System of ZTE Security Co. Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in UFIDA GRP-U8 Administrative Business Internal Control Management Software

hereinafter referred to as UFIDA, jointly established by UFIDA Software Group and the Institute of Fiscal Science of the Ministry of Finance, is an all-round business management information solution provider for government departments, institutions and non-profit organizations. A SQL injection...

SQL Injection Vulnerability in ejucms Backend

EJU real estate system ejucms is a set of localized O2O real estate website platform system. ejucms background SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

SQL injection vulnerability in an***.php page of website building system of Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion and so on. A SQL injection vulnerability exists in the an.php page of the website building system of Jinan Gannan Information Technology Co. An attacker can use this...

SQL injection vulnerability in sh***.asp page of website building system of Liaocheng City Sky Network Technology Co.

Ltd. provides one-stop online marketing planning, training, website construction, website production, website optimization, Baidu optimization, site optimization, keyword ranking, promotion, operation, SEO optimization and other e-commerce solutions, is committed to serving the vast number of sma...

SQL Injection Vulnerability in ZZCMS Backend st***.php File

ZZCMS is a free website builder developed in asp language. A SQL injection vulnerability exists in the background st.php file of ZZCMS. Attackers can use the vulnerability to obtain sensitive information in the database...

CVE-2020-14982

A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 affecting the com.threeis.webta.H352premPayRequest servlet's SortBy parameter allows an attacker with the Employee, Supervisor, or Timekeeper role to read sensitive data from the database...

SQL Injection Vulnerability in the Website Building System of Ruian Uber Technology Co. Ltd (CNVD-2020-48644)

Ltd. is a social mass to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM design...

Lee Lei's blog sh***_m***.php page suffers from SQL injection vulnerability

Li Lei blog is an open source PHP blog management system . Li Lei blog shm.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Unspecified Vulnerability in Nordic Semiconductor Android BLE Library and DFU Library

Nordic Semiconductor Android BLE Library and Nordic Semiconductor Android DFU Library are both products of Nordic Semiconductor, Norway.Nordic Semiconductor Android BLE Library is a Bluetooth Low Power BLE library. The Nordic Semiconductor Android BLE Library is a Bluetooth Low Energy BLE library...

SQL injection vulnerability in the ne***.asp page of website building system of Yixing Ding.com Network Service Co.

Yixing Ding.com Network Service Co., Ltd. is a network technology company engaged in enterprise Internet access, web hosting, system cabling and other services. There is a SQL injection vulnerability in the ne.asp page of the website building system of Yixing Ding.com Network Service Co. Ltd. whi...

GHSA-WWGF-3XP7-CXJ4 Potentially sensitive data exposure in Symfony Web Socket Bundle

Impact Inside Gos\Bundle\WebSocketBundle\Server\App\Dispatcher\TopicDispatcher::onPublish, messages are arbitrarily broadcasted to the related Topic if Gos\Bundle\WebSocketBundle\Server\App\Dispatcher\TopicDispatcher::dispatch does not succeed. The dispatch method can be considered to not succeed...

SQL Injection Vulnerability in Safety Production Comprehensive Information Management Platform of Jiangsu Sanheng Technology Co.

Jiangsu Sanheng Technology Co., Ltd. is a company engaged in coal mine safety production monitoring system and supporting sensors. There is a SQL injection vulnerability in the Safety Production Comprehensive Information Management Platform of Jiangsu Sanheng Science and Technology Co. Ltd, which...