Advantech WISE-PaaS/RMM SQL Injection Vulnerability

Advantech WISE-PaaS/RMM is an IoT device remote monitoring and management platform. A SQL injection vulnerability exists in Advantech WISE-PaaS/RMM 3.3.29 and earlier versions. The vulnerability stems from a lack of validation of user-supplied input. An attacker can exploit the vulnerability to...

WordPress Plugin Google Review Slider 'tid' SQL Injection Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A SQL injection vulnerability exists in the WordPress plugin Google Review Slider 'tid',...

One Stop Technology website builder system suffers from SQL injection vulnerability

One Stop Technology formerly Fuyang Tongtou.com, specializing in tourism enterprises to provide tourism network marketing one-stop service, we only focus on the tourism industry network marketing services, is the tourism network marketing one-stop service platform. There is a SQL injection...

TPshop open source mall system SQL injection vulnerabilities exist

TPshop open source mall system is a multi- merchant mode developed by Shenzhen SoBao Networks Co. Suitable for businesses and individuals to quickly build a personalized online shopping mall . System PC + background is based on ThinkPHP MVC framework for the development of cross-platform open...

SQL Injection Vulnerability in JTopCMS Backend Management System

JTopCMS is a JavaEE-based standards , for the management of site content of the open-source Web site management system CMS, can efficiently and conveniently site document collection , audit , page template production. JTopCMS backend management system SQL injection vulnerability , attackers can u...

SQL Injection Vulnerability in ZZCMS Frontend

ZZCMS is a content management system for Merchants Network. A SQL injection vulnerability exists in the frontend of ZZCMS. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Waychar Enrollment System

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in seacms backend ad***_jq***.php file ed*** method

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adjq.php file ed method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in ad***_to***.php file pi*** parameter in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adto.php file pi parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in the i*** Parameters of Thunderwind Movie CMS Mo***.php Page

Thunderwind CMS is a video-on-demand system developed using Thinkphp framework + Mysql to ensure the stability and efficiency of the program. Thunderwind Movie CMS Mo.php page i parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

SQL Injection Vulnerability in kkcms

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the...

SQL Injection Vulnerability in Chengdu JINWEI TECHNOLOGY CO.

Chengdu, Chengdu, this network technology is a Chengdu, engaged in website planning, web design, website construction and development, website optimization, Internet marketing and other professional services in the field of network technology limited company. A SQL injection vulnerability exists ...

Sourcecodester Hotel and Lodge Management System SQL Injection Vulnerability

Sourcecodester Hotel and Lodge Management System is a hotel and lodge management system. A SQL injection vulnerability exists in Sourcecodester Hotel and Lodge Management System version 1.0, which is caused by a lack of validation of externally entered SQL statements in a database-based applicati...

Sourcecodester Online Grading System SQL Injection Vulnerability

Sourcecodester Online Grading System is a student information management system. The system provides functions such as student information management and online grading. A SQL injection vulnerability exists in the Sourcecodester Online Grading System. An attacker can exploit this vulnerability to...

Zoho ManageEngine OpManager SQL Injection Vulnerability

Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. Zoho ManageEngine OpManager suffers from a SQL injection vulnerability that arises from a database-based application that lacks validation of externally entered SQL statements. An attacker...

FusionPBX SQL Injection Vulnerability

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. An SQL injection vulnerability exists in FusionPBX. An attacker can exploit this...

SQL Injection Vulnerability in zhicms Background ad***.php Page

ZhiCms is an enterprise building system based on PHP and mysql technology. A SQL injection vulnerability exists in the ad.php page in the background of zhicms, which can be exploited by attackers to obtain sensitive information such as database...

GHSA-58V4-QWX5-7F59 SQL Injection in knex

knex.js versions before 0.19.5 are vulnerable to SQL Injection attack. Identifiers are escaped incorrectly as part of the MSSQL dialect, allowing attackers to craft a malicious query to the host DB...

YouPHPTube 'id' Parameter SQL Injection Vulnerability

YouPHPTube is a PHP-based video website system. A SQL injection vulnerability exists in the 'id' parameter of the /plugin/ADServer/view/campaignsVideos.json file in YouPHPTube version 7.6. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

Bypass Vulnerability in Website Security Dog's SQL Injection Blocking Feature (CNVD-2019-41613)

Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. A bypass vulnerability exists in the SQL injection blocking feature of Website Security Dog. An attacker can bypass the SQL injection blocking feature of Website...