SQL Injection Vulnerability in PatrolFlow of Beijing Byzoro Network Technology Co.

PatrolFlow is a multi-service security gateway intelligent management platform of Beijing Byzoro Network Technology Co. A SQL injection vulnerability exists in PatrolFlow of Beijing Byzoro Networks Technology Co. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in iwebsns Backend of Jinan Digital Open Network Technology Co.

iWebSNS, a new generation of SNS software based on a full marketing technology architecture system, is built on the new LAMP marketing CMS development framework. There is a SQL injection vulnerability in the background of iwebsns of Jinan Digital Open Network Technology Co., Ltd. which can be...

Xi'an Baolian Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2020-25104)

Xi'an Bailian Network Technology Co., Ltd. is a technology-based company specializing in electromechanical enterprise management software development and website design. Xi'an Bailian Network Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by...

SQL injection vulnerability in ZZCMS backend zt***_se***.php file (CNVD-2020-25324)

zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ztse.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Anyang Zhidao Media Co.

Founded in 2011, Anyang Zhidao Media Co., Ltd. is a formal and professional Anyang network company engaged in Internet business and software development. There is a SQL injection vulnerability in the website building system of Anyang Zhidao Media Co., Ltd, which can be exploited by attackers to...

SQL Injection Vulnerability in Website Building System of Huaihua Fifth Element Network Information Company Limited (CNVD-2020-25547)

Huaihua Fifth Element Network Information Co., Ltd. is an Internet + application services company, Internet technology, marketing, operations, big data analysis, cloud computing applications as the core, to carry out the Internet + industrial integration operation and development. Huaihua Fifth...

ForU CMS suffers from SQL injection vulnerability (CNVD-2020-25782)

ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

SQL Injection Vulnerability in IBOS-Office Portal

IBOS-Office Portal is an open source office OA system developed by Shenzhen BOS Xiechuang Network Technology Co. IBOS-Office Portal has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

odata4j sql injection vulnerability

odata4j is a new open source toolkit. A SQL injection vulnerability exists in odata4j version 0.7.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...

SQL Injection Vulnerability in OurPHP

OurPHP is an enterprise e-commerce website builder. OurPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

YCCMS suffers from SQL injection vulnerability (CNVD-2020-24720)

YCCMS is a PHP version of a lightweight website building system. YCCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Heybbs Backend ad**.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background ad.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Heybbs Backend no***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background no.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Heybbs Backend ad***_se***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background adse.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

S-CMS suffers from SQL injection vulnerability (CNVD-2020-27168)

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CVE-2020-10817

The custom-searchable-data-entry-system aka Custom Searchable Data Entry System plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued...

Samsung Mobile Device SQL Injection Vulnerability (CNVD-2020-32869)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices suffer from a SQL injection vulnerability that can be exploited by attackers to execute arbitrary SQL queries with the help of specially crafted SQL statements...

Web exhibition PHP foreign trade enterprise website red style has SQL injection vulnerability

Netzhan Technology Beijing Century Netzhan Technology Co., Ltd. is an Internet service operator specializing in the field of exhibition shows. Nethub PHP foreign trade enterprise website red style SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

SQL Injection Vulnerability in Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

Grandstream UCM6200 SQL Injection Vulnerability (CNVD-2020-23201)

The Grandstream UCM6200 is an enterprise-class switch for IP telephony communications from Grandstream. An SQL injection vulnerability exists in the HTTP interface of the Grandstream UCM6200 versions prior to 1.0.19.20 and 1.0.20.17, which can be exploited by an attacker to execute shell commands...