CVE-2019-16309

FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...

SQL Injection Vulnerability in the Frontend Web*** of Nanjing Benan's Hidden Trouble Detection and Management Information System for Work Safety Accidents v2.3

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. Nanjing Benan Safety Production Accident Hidden Trouble Detection and Management Information System v2.3 There exists a SQL injection...

SQL Injection Vulnerability in the Front-end of Nanjing Benan's Hidden Trouble Investigation and Management Information System for Work Safety Accidents

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. SQL injection vulnerability exists in the front-end of Nanjing Benan's information system for investigating and managing hidden productio...

WordPress SlickQuiz SQL Injection Vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Foundation.SlickQuiz is a plugin for displaying and managing nice dynamic quizzes. WordPress SlickQuiz suffers from a SQL injection vulnerability that can be exploited by attackers to execute illegal SQL...

S-CM e-commerce system aj***.php page P_sort parameter SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CM e-commerce system aj.php page Psort parameter SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

WordPress photo-gallery plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. photo-gallery is an image gallery plugin used in it. A SQL injection vulnerability exists in WordPress photo-gallery 10Web Photo Galle...

SQL Injection Vulnerability in FlameCMS

FlameCMS lightweight modular front-end framework for developing fast, powerful web interfaces. FlameCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain database information...

S-CMS php version hospital website building system v1.0 SQL injection vulnerability in background aj***.php page (CNVD-2019-32865)

S-CMS php version hospital website building system is a PHP based website building system. S-CMS php version hospital website builder system v1.0 has a SQL injection vulnerability in the background aj.php page, which can be exploited by attackers to obtain sensitive information from the database...

Epignosis eFront LMS SQL Injection Vulnerability

Epignosis eFront LMS is a suite of online e-learning platforms from Epignosis, Inc. in the United States. The platform provides test building, assignment management, internal messaging, forums and online chat. A SQL injection vulnerability exists in Epignosis eFront LMS version 5.2.12 and earlier...

SQL Injection Vulnerability in the 'nrfl' Parameter of the APP Interface of Mobile Phone Letter (Mass Version)

Jiangsu Chuhuai Software Technology Development Co., Ltd. is a high-tech industry software company integrating software development, system integration and informationization construction. There is a SQL injection vulnerability in the Mobile Letter and Visit Mass Version APP, which can be exploit...

WordPress sharebar plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sharebar is a plugin used to add social sharing buttons to blogs. A SQL injection vulnerability exists in the WordPress sharebar plugi...

WordPress gigpress plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gigpress is used in one of the program listings to add and manage plug-ins. A SQL injection vulnerability exists in the WordPress...

SQL Injection Vulnerability in PHPMyWind infol***_s***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind infols.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

Prophecy International Snare Central SQL Injection Vulnerability

Prophecy International Snare Central is a suite of log collection and management tools from Prophecy International Australia. A SQL injection vulnerability exists in Prophecy International Snare Central versions prior to 7.4.5, which stems from a lack of validation of externally-entered SQL...

SQL injection vulnerability in the background aj***.php page of S-CMS government website builder system

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the background aj.php page of the S-CMS Government Building System, which can be exploited by an attacker to obtain sensitive information from the database...

WordPress rsvpmaker plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. rsvpmaker is used in one of the event scheduling and RSVP tracking plugin. A SQL injection vulnerability exists in WordPress...

WordPress appointment-booking-calendar plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. appointment-booking-calendar is an online appointment management plugin used in it. A SQL injection vulnerability exists in the...

WordPress gallery-photo-gallery plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. gallery-photo-gallery is a responsive gallery plugin used in it. A SQL injection vulnerability exists in the WordPress...

S-CMS enterprise website builder system backend P_br*** parameter exists SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Pbr parameter in the background of S-CMS enterprise website building system. Attackers...

SQL Injection Vulnerability in Teaching Quality Assurance System of Shanghai Shangding Software Technology Co.

The Teaching Quality Assurance System is a closed-loop management system that adopts a new business architecture and process handling model for the planning and initiation, execution and implementation, analysis and feedback of various teaching quality activities. Shanghai Shangding Software...