7055 matches found
PHPCMS suffers from SQL injection vulnerability
PHPCMS uses OOP object-oriented approach to the independent development of the framework. The framework is easy to expand, stable and with ultra-powerful load capacity, can fully meet the government agencies, educational institutions, institutions, commercial enterprises, individual webmasters...
SQL Injection Vulnerability in Pangu Website System of Shenyang Pangu Network Technology Co.
Shenyang Pangu Network Technology Co., Ltd. is a Baidu business as the core, for the local business to provide network marketing services of the Internet + group of companies. Shenyang Pangu Network Technology Co., Ltd. Pangu website system SQL injection vulnerability, attackers can use the...
CVE-2020-4187
IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174805...
Google Android Framework Information Disclosure Vulnerability (CNVD-2020-31527)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Framework component of Google Android 10. An attacker can exploit the vulnerability to obtain sensitive...
SQL Injection Vulnerability in University Worry-Free Online Course Selection System
School Worry-Free Online Course Selection System is designed to solve the problem of cumbersome work brought about by students' independent course selection by selecting courses online and completing personal course selection information, replacing the manual operation with paper. The system is...
MetInfo suffers from SQL injection vulnerability (CNVD-2020-33064)
MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in One Card Communication Service Client of Xiondi Co.
The XIONGDY Technology OneCard Communication Service Client is a one-card management system of XIONGDY Co. A SQL injection vulnerability exists in the One Card Communication Service Client of Xiondi Corporation. An attacker can exploit the vulnerability to obtain sensitive information from the...
IBM MobileFirst Platform Foundation Information Disclosure Vulnerability
IBM MobileFirst Platform Foundation is a suite of mobile application management solutions from IBM in the United States. The product is mainly used for building, managing and updating mobile applications. A security vulnerability exists in IBM MobileFirst Platform Foundation version 8.0.0.0, whic...
Inductive Automation Ignition Code Issue Vulnerability
Inductive Automation Ignition is a suite of integrated software platforms for SCADA systems from Inductive Automation, USA. The platform supports SCADA data acquisition and monitoring systems, HMI human machine interface and more. A code issue vulnerability exists in the handling of serialized da...
SQL Injection Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.(CNVD-2020-33072)
Digital campus is based on digital information and network, established on computer and network technology for the collection, processing, integration, storage, transmission and application of campus information on teaching, scientific research, management, technical services, life services, etc....
SQL Injection Vulnerability in Multiple Versions of Intimate Home Care Intimate Cat (imcat)
Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. SQL injection vulnerability exists in several versions of imcat. An attacker can exploit this vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in Li Lei's Blog
Li Lei blog is an open source PHP blog management system . Li Lei Blog has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Yixing Yifa Network Service Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2020-32570)
Yixing Yifa Network Service Co., Ltd. is a company with website construction, WeChat public platform, WeChat marketing as the main business. Yixing Yifa Network Service Co., Ltd. website building system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive informati...
SQL Injection Vulnerability in the Website Building System of Hainan Creative Future Culture and Media Co.
Hainan Creative Future Culture Media Co., Ltd. is an excellent enterprise engaged in brand one-stop website construction services. Hainan Creative Future Culture Media Co., Ltd. station building system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitiv...
SQL Injection Vulnerability in New Smart Drawing Software Management Platform
Zhejiang Provincial Surveying and Mapping Brigade is subordinate to Zhejiang Provincial Geological Survey Bureau, which was established in 1958, is a provincial-level institution specialized in surveying and mapping, and is one of the first batch of Class A surveying and mapping qualification uni...
NetApp Element OS and HealthTools Information Disclosure Vulnerability
NetApp Element OS and NetApp Element HealthTools are both products of the U.S.-based NetApp Corporation.NetApp Element OS is a suite of large-scale data management software for NetApp HCI hyperconverged infrastructure and SolidFire storage solutions.NetApp Element HealthTools is a tool primarily...
SQL Injection Vulnerability in Markpoint's Construction Engineering Quality Inspection System
Construction engineering quality testing system is a set of national standards to achieve the evaluation of the physical properties of building materials, and to achieve self-help commissioning, registration of samples, automatic collection and calculation, automatic generation of reports, query...
wego.co.za Cross Site Scripting vulnerability OBB-1166257
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SQL Injection Vulnerability in the Group Edition of Fanzhi Hotel Human Capital ES Management Platform of Hangzhou Yishixing Information Technology Co.
Ltd. is a high-tech enterprise entity specializing in system development, integration and services in the field of personnel and logistics card management in the hotel industry and RFID Internet of Things applications. Ltd. FANZI HOTEL HUMAN CAPITAL ES MANAGEMENT PLATFORM GROUP EDITION suffers fr...
Xi'an Bailian Network Technology Co., Ltd. website building system has SQL injection vulnerabilities
Xi'an BaiLian Network Technology Co., Ltd. is a domestic technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. website building system SQL injection vulnerability, attackers can use the...