NUUO CMS SQL Injection Vulnerability

NUUO CMS is a set of centralized software management platform from NUUO. The platform is used to centrally manage devices such as NVRs hard disk recorders and IP cameras, and provides functions such as user management and alarm management. A SQL injection vulnerability exists in NUUO CMS 3.3 and...

Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26788)

BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'updateblock' function of the Dynamiccontenttags.php file in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this...

CVE-2018-19468

HuCart 5.7.4 has SQL injection in getip in system/class/helperclass.php via the X-Forwarded-For HTTP header to the user/index.php?load=login&act=actlogin URI...

BSEN Ordering software SQL Injection Vulnerability

BSEN Ordering software is a procurement management system. A SQL injection vulnerability exists in BSEN Ordering software version 1.0. A remote attacker can use the vulnerability to view, add, modify, or delete information in the back-end database with the help of the...

SaltOS SQL Injection Vulnerability

SaltOS is a suite of enterprise management solutions from the SaltOS program. The product integrates features such as CRM Customer Relationship Management and ERP Enterprise Resource Planning. A SQL injection vulnerability exists in SaltOS version 3.1 r8126, which can be exploited by remote...

SeaCMS SQL Injection Vulnerability (CNVD-2019-08331)

SeaCMS Ocean CMS is a professional open source free PHP film and television system. SeaCMS 6.6.4 suffers from a SQL injection vulnerability, which can be exploited by attackers via the adminmakehtml.php topic parameter...

SQL Injection Vulnerability in Boqiang Network Technology Company's Website Building System

Boqiang network technology company is engaged in enterprise, business website design, website construction, e-commerce, graphic design, wap website construction and software development and other production and application in one of the Internet company. A SQL injection vulnerability exists in...

SQL Injection Vulnerability in the Website Building System of Shanghai Qiu Chuang Technology Co.

Ltd. is a professional company focusing on providing customers with high-end website planning, website construction, web design, brand network marketing and related Internet-based application services. A SQL injection vulnerability exists in the website building system of Shanghai Seek Creative...

Microsoft Dynamics 365 Remote Code Execution Vulnerability

Dynamics 365 is a product family of enterprise resource planning and customer relationship management applications released in July 2016 by Microsoft. A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises version 8. The vulnerability stems from the Dynamics server...

vulhub

It is an offensive tool for Web Application. The repository contains a collection of pre-built vulnerable docker environments, including a web application vulnerable to various attacks. The tool is designed to help developers and security researchers test and demonstrate the effectiveness of web...

MetInfo pa***.php file has sql injection vulnerability

MetInfo is a content management system developed using PHP and Mysql. A sql injection vulnerability exists in the MetInfo pa.php file, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in QuarkCall All-Media Call Center Platform of Beijing Topmin Information Technology Co.

QuarkCall all-media call center integrates Topmind call center and unified communications products and services, aiming to help enterprises optimize customer experience, improve satisfaction and loyalty; optimize workflow and improve work efficiency. There is a SQL injection vulnerability in the...

Free version of TouchNet Universal Mall website builder system suffers from SQL injection vulnerability

TouchNet universal mall station-building system is a set of universal station-building system developed by Tianjin TouchNet Technology Co. The free version of TouchNet Universal Mall Station Building System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

Cisco Integrated Management Controller Supervisor SQL Injection Vulnerability

Cisco Integrated Management Controller IMC Supervisor is a set of tools used by Cisco to manage UCS Unified Computing System, which supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down, and restarting the server. A SQL injection vulnerability exists in the web...

SQL Injection Vulnerability in HDCMS v2.0 groupLists Function

HDCMS is a content management system software package developed in PHP+Mysql. It provides customers with powerful and complete functionality to accomplish rapid website development. HDCMS v2.0 version groupLists function has a SQL injection vulnerability, remote attackers can use this vulnerabili...

SQL Injection Vulnerability in Nanjing Yunhuatong Network Technology Website Building System

Nanjing Yunhuatong Network Technology Station Building System is an enterprise station building system developed by Nanjing Yunhuatong Network Technology Co. There is a SQL injection vulnerability in Nanjing Yunhuatong Network Technology website building system, which can be exploited by attacker...

CVE-2018-18787

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...

Quick Count 'txtInstID' Parameter SQL Injection Vulnerability

Quickcount is a way to measure audience response on your own web host without having to prepare special slides or other settings. A SQL injection vulnerability exists in the 'txtInstID' parameter of Quick Count version 2.0, which can be exploited by an attacker to gain access to sensitive databas...

zzcms SQL Injection Vulnerability (CNVD-2018-26020)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the admin/tagmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of the...

Joomla Component Responsive eXtro jQuery Gallery 'filter_category' parameter SQL injection vulnerability

eXtro Responsive Gallery creates fully responsive galleries based on images stored in the server catalog. The module also creates optimized preview images based on settings. A SQL injection vulnerability exists in the 'filtercategory' parameter in Joomla Component Responsive eXtro jQuery Gallery...