SQL Injection Vulnerability in iCMS Backend da***.ad***.php File

iCMS is a content management system built with PHP and MySQL. A SQL injection vulnerability exists in the iCMS backend da.ad.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in ASP Free Version of VANOC Enterprise Website Management System

Vanno Enterprise Website Management System is a website content management system based on a full DIV+CSS template. VANOC Enterprise Website Management System ASP Free Edition suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Shijiazhuang Hejia Technology Co., Ltd. machine room dynamic ring monitoring system has information leakage vulnerability

The dynamic environment monitoring system of the server room is the monitoring function of the important environment and power and other equipment in the server room, including environmental equipment monitoring temperature, humidity, smoke, flooding, precision air conditioning, ordinary air...

Wenzhou Yougu Technology Co., Ltd. website building system SQL injection vulnerability

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Science and Technology Co., Ltd. station building system there are SQL injection...

Zhengzhou Weikou Network Technology Co., Ltd. yiqicms foreground ar***.php file SQL injection vulnerability

Yiqi CMS yiqicms is a content management system CMS for marketing-oriented enterprise websites. Zhengzhou Weikou Network Technology Co., Ltd. yiqicms front ar.php file SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in iWebShop of Jinan Ai Cheng Network Technology Co.

iWebShop is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source free mall system. Jinan Ai Cheng Network Technology Co., Ltd. iWebShop SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the...

Directory Traversal Vulnerability in Jiapeng Pharmaceutical Flow System

Jiapeng Pharmaceutical Flow System is a pharmaceutical software with B/S browser architecture. A directory traversal vulnerability exists in Jiapeng Medical Flow System, which can be exploited by attackers to obtain sensitive information and perform operations...

SQL Injection Vulnerability in us***.php page ty*** parameter of webstore website builder system

Xi'an BaiLian Network Technology Co., Ltd. is a domestic technology company specializing in bearing industry management software development and bearing industry portal design. Web mall building system us.php page ty parameters exist SQL injection vulnerability, attackers can use the vulnerabilit...

SQL Injection Vulnerability in Qixing Helpdesk kb***_ca***.aspx Interface

Kaixin HelpdeskHelpdesk is a system for dealing with day-to-day issues that helps IT collect the issues it deals with on a daily basis and generate reports to quantify the work. A SQL injection vulnerability exists in the kbca.aspx interface of Qixing Helpdesk, which can be exploited by attackers...

DEBIAN-CVE-2019-14864

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

PYSEC-2020-179

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

SQL Injection Vulnerability in Taiyuan Tianxiang Technology Co.

Taiyuan Tianxiang Technology Co., Ltd. is a company that provides a series of services such as website construction, website design, website optimization, website maintenance, website promotion, seo optimization, marketing planning, internet marketing and so on. Taiyuan Tianxiang Technology Co.,...

SQL injection vulnerability in the frontend fl***.php file of Dascommerce B2B2C multi-user mall system

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. A SQL injection vulnerability exists in the fl.php file of the B2B2C multi-user mall system. An attacker can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Ride the Wind Multi-User PHP Statistics System vi***.php Page

Ride Multi-User PHP Statistics System supports multi-user applications, as well as website and online store statistics. A SQL injection vulnerability exists in the vi.php page of Ridewind Multi-User PHP Statistics System, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in Aifei Routing System

LoveFast Routing System is a DPI-based network management system. There is an arbitrary file download vulnerability in AIFRS, which can be exploited by attackers to download arbitrary files and obtain sensitive information...

GitLab Information Disclosure Vulnerability (CNVD-2020-03764)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

SQL Injection Vulnerability in the ma***.php Page of Golden Flavor Smart Order Payment Management System

Golden Flavor restaurant ordering payment management system is a restaurant ordering system developed in php. A SQL injection vulnerability exists in the ma.php page of the Golden Taste Smart Order and Payment Management System. An attacker can exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Catapult OA Mobile Cloud Office System

Catapult OA mobile cloud office system, the use of industry-leading cloud computing technology, based on the traditional Internet and mobile Internet, innovative cloud services + cloud terminal application mode, for enterprise users to provide an account management aggregation application service...

EyouCms suffers from SQL injection vulnerability (CNVD-2020-02271)

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2020-01267)

Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Adobe Acrobat and Reader have out-of-bounds read vulnerability, attackers can use the vulnerability ...