YouDianCMS suffers from SQL injection vulnerability (CNVD-2020-28096)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability, attackers can use the vulnerability to obtain databas...

SQL Injection Vulnerability in Website Building System of Shenzhen Shenzhou Tongda Network Technology Co.

Shenzhen Shenzhou Tongda Network Technology Co., Ltd. specializes in providing Tencent enterprise mailbox, high-end website construction PC website, cell phone website, WeChat public account, SEO optimization and promotion, enterprise WeChat and other network infrastructure services and network...

SQL Injection Vulnerability in Waychar Enrollment System aj***.php Page mo*** Parameters

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar enrollment system aj.php page mo parameters exist SQL injection vulnerability, an attacker can use this vulnerability to obtain sensitive information in the database...

CVE-2020-10997

Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONASCHEMA.xtrabackuphistory table...

WordPress Advanced Woo Search Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Advanced Woo Search is a search plugin used in it. An information disclosure vulnerability exists in ajax query requests in Wordpress...

SQL Injection Vulnerability in Jinwei Mobile Mall System (CNVD-2020-29419)

Jinwei Mobile Mall System is a mall management system for micro-business customers with public numbers. A SQL injection vulnerability exists in Jinwei Mobile Mall System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Dm Website Building System

DM enterprise building system is developed by php + mysql for small and medium-sized enterprise website construction of a set of open source cms. Dm website builder system has a SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Jinwei Mobile Mall System (CNVD-2020-31079)

Jinwei Mobile Mall System is a mall management system for micro-business customers with public numbers. A SQL injection vulnerability exists in Jinwei Mobile Mall System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Heybbs Micro Community ad***.php File

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. A SQL injection vulnerability exists in the Heybbs Micro Community ad.php file. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Shanghai TengYan Information Technology Co.

The main business of Shanghai TengYan Information Technology Co., Ltd. is to provide customers with IT solutions and IT outsourcing services. Shanghai TengYan Information Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited by attackers to...

SQL injection vulnerability in the ne***.php page of Huaxia Chemical website builder system (CNVD-2020-31519)

Huaxia chemical network is by Shanghai Danfan network technology limited company founded, is for the chemical industry to provide security, high efficiency, multi-function, system supporting B2B electronic commerce platform of professional website. Huaxia Chemical website building system ne.php...

CVE-2020-10211

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive...

SQL Injection Vulnerability in Joomla! simpleMembership Component

Joomla! simpleMembership is a flexible, simple tool for managing memberships and subscriptions. An SQL injection vulnerability exists in the Joomla! simpleMembership component, which can be exploited by an attacker to obtain sensitive information about a database...

Envoy and Istio Information Disclosure Vulnerabilities

Envoy is an open source distributed proxy server.Istio is an open platform for connecting, managing and securing microservices. An information disclosure vulnerability exists in Istio 1.5.1 and earlier versions and Envoy 1.14.1 and earlier versions. An attacker can exploit the vulnerability to...

ShopsN open source mall system SQL injection vulnerability

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system SQL injection vulnerability ,...

Shanghai Danfan Network Technology Co., Ltd. builds website system with SQL injection vulnerability (CNVD-2020-26367)

Huaxia chemical website building system is founded by Shanghai Danfan network science and technology limited company, is for the chemical industry to provide security, high efficiency, multi-function, system supporting B2B electronic commerce platform professional website. Shanghai Danfan network...

WordPress Tickera plugin <= 3.4.6.7 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Florian Hauser in WordPress Tickera plugin versions = 3.4.6.7. Solution Update the WordPress Tickera plugin to the latest available version at least 3.4.6.9...

Tickera WordPress Event Ticketing < 3.4.6.9 - Unauthenticated Sensitive Data Exposure

Due to missing authorization controls in the "admininit" hooks, all personal data from registered users of an event could be exported into a downloadable PDF file by every unauthenticated user. The event ID could be read from the page source and/or easily enumerated in sequence. According to the...

Juniper Networks Junos OS Evolved Log Message Disclosure Vulnerability (CNVD-2020-29614)

Juniper Networks Junos OS is a Juniper Networks network operating system designed for use with Juniper Networks hardware devices. The operating system provides a secure programming interface and the Junos SDK.Junos OS Evolved is an upgraded version of Junos OS. A log information disclosure...

CVE-2020-4284

IBM Security Information Queue ISIQ 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176207...