The vulnerability in HMI/SCADA Equinox Control Expert, related to the failure to protect the SQL query structure, allows a intruder to gain unauthorized access to protected information.

The vulnerability in HMI/SCADA Equinox Control Expert relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by sending specially crafted SQL queries to the database...

CVE-2019-12619

A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could...

Cisco SD-WAN Solution SQL Injection Vulnerability

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An SQL injection vulnerability exists in the web interface of Cisco SD-WAN Solution vManage. The vulnerability stems from insufficient validation of user-supplied input. A remote...

Cisco SD-WAN Solution SQL Injection Vulnerability (CNVD-2020-04036)

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An SQL injection vulnerability exists in the web interface of Cisco SD-WAN Solution vManage. The vulnerability stems from insufficient validation of user-supplied input. An attacker could...

SQL injection vulnerability exists in us***.php page of Xi'an Bailian Network Technology Co.

Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. SQL injection vulnerability exists in the us.php page of the website building system of Xi'an Bailian Network Technology...

PHPGurukul Small CRM SQL Injection Vulnerability

PHPGurukul Small CRM is a customer relationship management system. A SQL injection vulnerability exists in the /in.php file in version v2.0 of PHPGurukul Small CRM. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker c...

PT-2020-7693 · Unknown · Déjà Vu Crescendo Sales Crm

Name of the Vulnerable Software and Affected Versions: Déjà Vu Crescendo Sales CRM affected versions not specified Description: The issue is related to a remote SQL Injection. No further details are provided about the estimated number of potentially affected devices or real-world incidents...

Dairy Farm Shop Management System SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . A SQL injection vulnerability exists in Dairy Farm Shop Management System version 1.0. The vulnerability stems from a lack of validation of externally entered SQL statements in a database-based application. ...

SQL Injection Vulnerability in 51 Micro Voting System

51 Micro Voting System is a platform system that provides customers with online voting services through the Internet. There is a SQL injection vulnerability in 51MicroVoting System, which can be exploited by attackers to obtain sensitive information in the database...

SQL Injection Vulnerability in Xinkao Online Marking System of Hebei Xinkao Education Technology Co.

Hebei Xinkao Education Technology Co., Ltd. is a professional high-tech enterprise dedicated to the informatization of educational applications, and has developed the Campus Card Management System, Xinkao Online Marking System and Home-School Interconnection System. Hebei Xinkao Education...

SQL Injection Vulnerability in Wecenter of Shenzhen Weike Interactive Co.

WeCenter is a completely open source social networking program similar to Zhihu based on Q&A, based on PHP+MYSQL application architecture. WeCenter has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Cisco Data Center Network Manager REST API SQL Injection Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A REST API SQL injection vulnerability exists in Cisco Data Center Network Manager...

XerCMS in***.php file suffers from SQL injection vulnerability

Ctrip CMS XerCMS is a content management system based on php+mysql, integrating membership, community, guestbook, news and model management. An SQL injection vulnerability exists in the XerCMS in.php file, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in ZKEACMS

Paper shell CMS ZKEACMS is ZKEASOFT independent research and development, open source website system, you can directly use it to do for your corporate website, portal or personal website, blog, or use it to do the second custom development to meet your specific needs. ZKEACMS has a SQL injection...

File Upload Vulnerability in Laike Ecommerce Management System

Laike e-commerce system is an open source e-commerce system. Laike E-commerce Management System suffers from a SQL injection vulnerability that can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in Hula Enterprise Website Management System of Qingdao Scorch Culture Media Co.

Hula enterprise website management system is based on ThinkPHP5 framework development, security and efficiency, including all the features of ThinkPHP5. Qingdao Scorch Culture Media Co., Ltd. Hula enterprise website management system has a SQL injection vulnerability, which can be exploited by...

Equinox Control Expert SQL Injection Vulnerability

Equinox Control Expert is a human interface and data acquisition and monitoring system from Equinox Argentina. A SQL injection vulnerability exists in Equinox Control Expert. The vulnerability stems from a lack of validation of externally entered SQL statements in a database-based application. A...

SQL Injection Vulnerability in the ma***.php Page of Golden Flavor Smart Order Payment Management System

Golden Flavor restaurant ordering payment management system is a restaurant ordering system developed in php. A SQL injection vulnerability exists in the ma.php page of the Golden Taste Smart Order and Payment Management System. An attacker can exploit the vulnerability to obtain sensitive...

Joomla! SQL Injection Vulnerability (CNVD-2020-12711)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A SQL injection vulnerability exists in Joomla! versions prior to 3.9.14, which stems from a lack of validation of externally-entered SQL statements...

SonicWall SMA100 SQL Injection Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A SQL injection vulnerability exists in SonicWall SMA100 9.0.0.3 and earlier versions, which stems from a lack of validation of externally entered SQL statements in database-based applications and can be exploited by an...