SQL Injection Vulnerability in Smart Government OA Collaboration Platform

Intelligent government OA collaborative office platform is a set of independent research and development of collaborative office software, is specifically tailored for the government office of the new office software system. There is a SQL injection vulnerability in Smart Government OA...

UBUNTU-CVE-2020-14443

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

The vulnerability of the Admidio membership management and access control application lies in the improper neutralization of special elements used in SQL commands, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Admidio membership management and access control application lies in the improper elimination of special elements used in SQL queries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through...

SQL Injection Vulnerability in Website Building System of Chifeng E-top Network Limited (CNVD-2020-41757)

Ltd. is mainly engaged in website construction, website promotion, website planning, software development, network promotion, network integrated marketing and other businesses. There is a SQL injection vulnerability in the website building system of Chifeng E-top Network Co., Ltd, which can be...

Educational Resources Public Service Platform suffers from SQL injection vulnerability

The Public Service Platform for Educational Resources is an educational cloud platform covering core applications based on cloud computing and built through the deep integration of information technology and the teaching process. SQL injection vulnerability exists in the Education Resources Publi...

SQL Injection Vulnerability in Virtual Airlines Manager

VAM originated as a system developed for the Spanish VA with the goal of having a complete web system independent of other systems. A SQL injection vulnerability exists in Virtual Airlines Manager, which can be exploited by an attacker to obtain sensitive information about a database...

SQL Injection Vulnerability in Nanjing Huaiyu Technology Online Marking System

Since 2002, Nanjing Huaiyu Technology Co., Ltd. has been committed to the use of computer hardware and software technology, opto-mechanical technology, pattern recognition and other technologies to develop, produce and sell for the field of education cursor readers and online marking and other...

CVE-2020-13996

The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...

SQL Injection Vulnerability in Website Building System of Ningbo Yizeli Network Technology Co.

Ningbo Yi Zeli Network Technology Co., Ltd. is a foreign trade marketing and promotion company, focusing on providing integrated Internet promotion solutions for foreign trade enterprises. Ningbo Yizeli Network Technology Co., Ltd. website building system has a SQL injection vulnerability,...

SQL injection vulnerability in ab***.asp page of Shijiazhuang Baicheng Network Technology Co.

Shijiazhuang Baicheng Network Technology Co. Shijiazhuang Baicheng Network Technology Co., Ltd. building system ab.asp page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Extreme CMS Co***.php File

Extreme CMS is an open source and free PHPCMS web content management system. Extreme CMS Co.php file has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in UFIDA NC

UFIDA NC6 is a new series of UFIDA NC products, a world-class high-end management software for group enterprises. A SQL injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in the pho*** page of the website building system of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. Ltd. station building system pho page exists SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

rConfig SQL Injection Vulnerability (CNVD-2020-38220)

rConfig is an open source network configuration management utility . A SQL injection vulnerability exists in rConfig 3.9.4 and earlier versions, which stems from the program storing node passwords in plaintext. An attacker can exploit this vulnerability to access a listened network device...

SQL Injection Vulnerability in Website Building System of Jinhua Yitu Network Technology Co.

Ltd. is a professional creative design company dedicated to online marketing and brand image strategy design. There is a SQL injection vulnerability in the website building system of Jinhua Yitu Network Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from t...

Cisco Prime Infrastructure Software SQL Injection Vulnerability

Cisco Prime Infrastructure Software is the United States Cisco Cisco company's set of basic network lifecycle management solutions. The product integrates Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS. An SQL injection vulnerability exists in the web-based...

CVE-2020-3339

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this...

SQL Injection Vulnerability in Shouyue Information Network Co.

Shou Yueh Information Network Co., Ltd. is a company that combines consulting network, marketing channel, and system software. A SQL injection vulnerability exists in Shouyue Information Network Co., Ltd.'s website system, which can be exploited by attackers to obtain sensitive information from t...

SQL Injection Vulnerability in Website Building System of Suzhou Jushang Network Technology Co.

Suzhou Jushang Network Technology Co., Ltd. specializes in enterprise website construction and e-commerce services, including enterprise e-commerce solutions, website construction, domain name registration, web hosting, enterprise post office, software development, system integration, Baidu searc...

LJCMS suffers from SQL injection vulnerability (CNVD-2020-32623)

LJCMS is a free and open source content management system. LLJCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...