CwCms v1.8_asp Exists SQL Injection Vulnerability

CwCMS is a customized ASP+Access/MsSql content management system specifically designed for corporate websites. CwCms v1.8asp suffers from a SQL injection vulnerability. The vulnerability stems from the program does not strictly filter parameters. An attacker can exploit this vulnerability to obta...

CVE-2018-8820

An issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability in the "match" parameter allows remote authenticated attackers to execute arbitrary SQL commands. It is possible to upgrade access to full server compromise via xpcmdshell. In some cases, the...

Unisys ClearPath MCP OS and ClearPath OS 2200 ePortal Manager SQL Injection Vulnerability

Unisys ClearPath MCP OS and ClearPath OS 2200 are both dedicated operating systems for ClearPath servers from Unisys Corporation of the United States. ePortal Manager is one of the enterprise portal managers. An SQL injection vulnerability exists in the management interface of ePortal Manager on...

NetVault Backup TimeRange Code Execution

The vulnerability of the NVBUBackup TimeRange request handler in the NetVault Backup software for data archiving and restoration is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

NetVault Backup NVBUScheduleSet Code Execution

The vulnerability of the NVBUScheduleSet request handler in software for data archiving and restoration by NetVault Backup is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

HPE Network Automation Auth Bypass Privilege Escalation

The vulnerability of the HPE Network Automation system management system is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and gain increased privileges...

NetVault Backup Get Request Handler Code Execution

The vulnerability of the NVBUJobDefinition Get request handler in the NetVault Backup data archiving and restoration software lies in the insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

NetVault Backup Count request handler Code Execution

The vulnerability of the NVBUBackup Count request handler in the NetVault Backup data archiving and restoration software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

NetVault Backup Get Request Handler Code Execution

The vulnerability of the NVBUBackupSegment Get request handler in the NetVault Backup data archiving and restoration software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

NetVault Backup PluginList Request Handler Code Execution

The vulnerability of the NVBUBackup PluginList request processor in the NetVault Backup data archiving and restoration software relates to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

NetVault Backup Get Request Handler Code Execution

The vulnerability of the NVBUBackupOptionSet Get request handler in the NetVault Backup data archiving and restoration software lies in the insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

SQL injection vulnerability in Monxin Forms System \program\talk\show\set_group.php page

Monxin Forms System is an open source program that runs on PHP+MySQL. A SQL injection vulnerability exists in the \program\talk\show\setgroup.php page of Monxin Forms System. An attacker can exploit this vulnerability to obtain sensitive information from the database...

Geutebruck IP Cameras SQL Injection Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A SQL injection vulnerability exists in Geutebruck IP Cameras, which allows attackers to exploit the vulnerability to alter stored data...

Kentico SQL Injection Vulnerability

Kentico is the United States Kentico Software Corporation of a set of ASP.NET-based content management system CMS. The system consists of two main tools : Kentico CMS Desk is used to edit the content of the page ; Kentico CMS Controls is used to edit and control various elements of the page . An...

SQL Injection Vulnerability in MaxCMS Version 4.0

Movie System Max Program MaxCMS is an open source program that specializes in serving the construction of movie websites. MaxCMS version 4.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in cms_admin_edit.php file of VANOC enterprise website management system (PHP version)

Vanno enterprise website management system PHP version is a php+MySQL development of php enterprise website management system. An SQL injection vulnerability exists in the cmsadminedit.php file of the Vanno Enterprise Website Management System PHP Edition. An attacker can exploit the vulnerabilit...

SQL Injection Vulnerability in Taicang Suyi Information Technology Co.

Taicang Suyi Information Technology Co., Ltd. is a technology-oriented enterprise integrating website construction, software development, mobile application development, interface design and system integration. There is a SQL injection vulnerability in the website building system of Taicang Suyi...

EllisLab CodeIgniter SQL Injection Vulnerability

EllisLab CodeIgniter is the United States EllisLab company for PHP web developers to use a set of application development framework and toolkit . A SQL injection vulnerability exists in the offset method of the Active Record class in EllisLab CodeIgniter versions prior to 2.2.4. A remote attacker...

HamayeshNegar CMS signup component SQL injection vulnerability

HamayeshNegar CMS is a content management system. signup component is one of the signup functionality components. A SQL injection vulnerability exists in the users/signup.php file of the signup component in HamayeshNegar CMS. The vulnerability can be exploited by a remote attacker to execute...

SQL injection vulnerability in user.mod.php file of UQCMS Cloud B2B2C multi-store system

UQCMS cloud business system is a program using PHP + MYSQL, template using smarty template B2B2C e-commerce software. UQCMS Cloud Business B2B2C multi-store system user.mod.php file has a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...