SQL injection vulnerability in EjuCMS Us***.php file (CNVD-2020-23628)

EjuCMS is a localized O2O real estate website platform system. A SQL injection vulnerability exists in the EjuCMS Us.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Joyplus CMS ad***_ap***_co***.php File

Joyplus CMS Joy Video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . Joyplus CMS adapco.php file contains a SQL...

Ansible Information Disclosure Vulnerability (CNVD-2020-16727)

Ansible is a computer system configuration manager from the American company Ansible. The product can be used to publish, manage and organize computer systems. A security vulnerability exists in Ansible. An attacker can exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Website Building System of Shanghai Enterprise Torch Advertising Media Co.

Ltd. is one of the early technology-based companies in China to provide high-quality Internet application services for enterprise information construction. There is a SQL injection vulnerability in the website system of Shanghai Enterprise Torch Advertising Media Co., Ltd. that can be exploited b...

SQL injection vulnerability in website building system li***.php page of Daqing Jiujiu Network Technology Co.

Daqing JiuJiu Network Technology Co., Ltd. is a technology-based service enterprise diversified in the field of full network marketing, enterprise e-commerce, network information technology services. Daqing JiuJiu Network Technology Co., Ltd. building system li.php page SQL injection vulnerabilit...

WP Security Audit Log < 4.0.2 - Broken Access Control in First-Time Install Wizard

Broken access control vulnerability affecting version 4.0.1 and below that could lead to privilege escalation, sensitive data exposure and insecure deserialisation. To exploit the vulnerability, the wizard must not have been completed, otherwise it won’t work...

SQL Injection Vulnerability in Jinwei Smart Restaurant System (CNVD-2020-22749)

Jinwei Intelligent Restaurant System is an internal management system for all major and small restaurants. Jinwei Intelligent Restaurant System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Huaihua Fifth Element Network Information Company Limited (CNVD-2020-23006)

Huaihua Fifth Element Network Information Co., Ltd. is an enterprise specializing in Internet information service, enterprise application software development and e-commerce platform construction. Huaihua Fifth Element Network Information Co., Ltd. website building system has a SQL injection...

SQL injection vulnerability in Kaiping Lianke Network Technology website building system

Kaiping Lianke Network was founded in 2005, is a main website construction, website promotion, speedy software, bathroom ERP management software, micro letter marketing company. SQL injection exists in Kaiping Lianke Network Technology website building system. Attackers can use this vulnerability...

SQL Injection Vulnerability in DM Website Building System (CNVD-2020-23764)

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM website building system has a SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information on the...

SQL Injection Vulnerability in DM Website Building System (CNVD-2020-23765)

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM website builder system has a SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information on the sit...

SQL Injection Vulnerability in Website Building System of Shenzhen Dr. Tong Technology Co.

Ltd. business covers domain name registration, space purchase, enterprise website construction, Shenzhen website construction, marketing website construction, platform website customization, mobile website construction, enterprise mailbox application, WeChat public number operation, Baidu bidding...

Yantai Cloud Pulse Network Technology Co., Ltd. SQL injection vulnerability exists in Cloud Pulse Network website building system

Yantai cloud pulse network technology limited company cloud pulse network for brands to provide network station building services. There is a SQL injection vulnerability in the Yantai Cloud Vein Network Technology Co., Ltd. website builder system that can be exploited by attackers to obtain...

SQL Injection Vulnerability in Qingdao Shangzhixin Network Technology Co.

Qingdao business to letter network dedicated to Qingdao website construction, Qingdao Baidu promotion. Qingdao Shangzhixin Network Technology Co., Ltd. website construction system there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Nantong XED Software Co., Ltd. website building system has SQL injection vulnerabilities

Nantong XED Software Co., Ltd. in 2002 to get involved in the Internet industry, the use of the Internet's fast, comprehensive, accurate features, specializing in the construction of Haian area enterprises, business Web site, and Sina, Sohu, Baidu, Yahoo, Huicong real-time online registration...

CVE-2020-5400

Cloud Foundry Cloud Controller CAPI, versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the job. A malicious user with access to those logs may gain unauthorized access to resources protected b...

SQL Injection Vulnerability in SemCMS SE***_Do***.php File

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEDo.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SimpleSAMLphp Log Message Disclosure Vulnerability

SimpleSAMLphp is a PHP authentication application that implements the SAML 2.0 Service Provider and Identity Provider features. A log information disclosure vulnerability exists in SimpleSAMLphp. The vulnerability originates from the abnormal output of log files from a web system or product. An...

CVE-2014-4651

CVE-2014-4651 affects the jclouds scriptbuilder Statements class, which writes a temporary file to a predictable location. This could allow an attacker to access sensitive data, cause a denial of service, or perform other attacks. Public details include a high to critical impact (CVSS v2 base 7.5...

SQL injection vulnerability in Zendo Project Management Software co***.php file

Zendo Project Management Software is homegrown open source project management software. Zendo Project Management Software co.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...