SQL Injection Vulnerability in Jinwei Supermarket Cashier System (CNVD-2020-22269)

Jinwei Supermarket Cashiering System is a code-sweeping cashiering tool designed for small and medium-sized supermarkets and community convenience stores. SQL injection vulnerability exists in Jinwei Supermarket Cashier System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in WeiPHP

WeiPHP is an open source microsoft public platform development framework. WeiPHP has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Yingkou Aisda Computer Information Technology Network Co., Ltd. website building system has SQL injection vulnerabilities

Yingkou Aisda Computer Information Technology Network Co., Ltd. is a company engaged in software system development, large-scale website program development. Yingkou Aisda computer information technology network limited company to build the system there is a SQL injection vulnerability, the...

Foshan City Suhu Network Technology Co., Ltd. building system there are SQL injection vulnerabilities

Foshan City, Sohu Network Technology Co., Ltd. is a commitment to provide a full range of web site construction services for the enterprise Internet company. Foshan City, Sohu Network Technology Co., Ltd. building system there is a SQL injection vulnerability, attackers can use the vulnerability ...

SQL Injection Bypass Vulnerability in CloudLock windows version

CloudLock is a free server security management software based on operating system kernel hardening technology, which supports cross-platform real-time, batch and remote security management of windows/linux servers. There is a SQL injection bypass vulnerability in the windows version of CloudLock,...

SQL Injection Vulnerability in Jinwei Intelligent Restaurant System

Jinwei Smart Restaurant System is a free restaurant management software. It is suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, western food, hot pot restaurant and other kinds of catering business. SQL injection vulnerability exists in Jinwei Intelligent...

Symfony HTTP-Foundation SQL Injection

The vulnerability of the “setMethod” function in the Symfony software platform for web application development and management is related to the lack of measures to protect SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary code through SQL injection...

Heybbs us***_re***.php file suffers from SQL injection vulnerability

Heybbs is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community programs. A SQL injection vulnerability exists in the Heybbs usre.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

LJCMS suffers from SQL injection vulnerability (CNVD-2020-18760)

LJCMS is a free and open source content management system. LJCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

EjuCMS suffers from SQL injection vulnerability

EjuCMS is a localized O2O real estate website platform system. EjuCMS suffers from an SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in SemCMS SE***_Qu***.php File

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEQu.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in uqcms cloud commerce system (CNVD-2020-18781)

uqcms is a lightweight shopping software, light application, light deployment, multiple clients with different presentations.PHP+MySql easy to build, Smarty template tags, two open more convenient. Can be used for free for business. SQL injection vulnerability exists in uqcms cloud commerce syste...

MyuCMS open source content management system In***.php file SQL injection vulnerability

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. MyuCMS open source content management system In.php file SQL injection vulnerability . Attackers can exploit the vulnerability to obtain...

SQL Injection Vulnerability in UQCMS B2B2C E-commerce System

UQCMS is a lightweight shopping software, light application, light deployment, multiple clients with different presentations.PHP+MySql easy to build, Smarty template tags, two open more convenient. Can be used for free for business. UQCMS B2B2C e-commerce system suffers from a SQL injection...

Cisco SD-WAN vManage Web Interface Data Compromise

The vulnerability in the vManage web interface of Cisco’s programmable network architecture involves a lack of protection for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

Progress Software MOVEit Transfer SQL Injection Vulnerability (CNVD-2020-19007)

Progress Software MOVEit Transfer is a suite of file transfer software from Progress Software, USA. A SQL injection vulnerability in the REST API in Progress Software MOVEit Transfer version 2019.1 before 2019.1.4 and version 2019.2 before 2019.2.1 can be exploited by an attacker to access the...

PT-2020-1843 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 3.9 to 6.0.3 Description: The issue is related to a lack of input checks for SQL queries, which might allow an attacker to perform SQL injection attacks against the backend database. This could potentially be exploited by a...

CVE-2020-3934

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

PT-2020-1616

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Reporting Services versions 2012 through 2016 Description A remote code execution issue exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. This could allow an attacker to execute...

Jobberbase SQL Injection Vulnerability (CNVD-2020-04571)

Jobberbase is an open source platform for building job search websites. A SQL injection vulnerability exists in Jobberbase. The vulnerability stems from a lack of validation of externally entered SQL statements in the database-based application. An attacker can exploit this vulnerability to execu...