CVE-2017-12710

A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.220170817. By submitting a specially crafted parameter, it is possible to inject arbitrary SQL statements that could allow an attacker to obtain sensitive information...

Advantech WebAccess SQL Injection Vulnerability (CNVD-2017-23886)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. Advantech WebAccess suffers from a SQL injection...

Xiamen Dragon Pulse website building system products.asp page sid parameter SQL injection vulnerability

Xiamen Dragon Pulse Network is a website building system. Xiamen Dragon Pulse Network website builder system products.asp page sid parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

Yunnan Dandelion Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Yunnan Dandelion Network Technology Co., Ltd. is a station building system. A SQL injection vulnerability exists in Yunnan Dandelion Network Technology Co. The vulnerability is due to the system id parameter does not filter the data submitted by the user, a remote attacker can exploit the...

Unspecified SQL Injection Vulnerability in SAP NetWeaver

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. SAP NetWeaver suffers from an unspecified SQL injection vulnerability due to the program's failure to adequately...

SQL Injection Vulnerability in Xiaowei OA v2.0

Xiaowei OA system is Beijing Xiaowei Help Technology Co., Ltd. to provide mobile office platform for small and medium-sized enterprises. SQL injection vulnerability exists in Xiaowei OA v2.0, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in the file /qkshowmarc/show_xk.asp of the Mythos™ Literature Management System

Mythos™ Document Management System is a library management reference platform with a professional database as the backend data storage on Windows or UNIX/Linux platform. A SQL injection vulnerability exists in the Qkxxbid parameter of the file /qkshowmarc/showxk.asp in the Mythos™ Document...

SQL Injection Vulnerability in Mythos™ Documentation Management System

Mythos™ Document Management System is a library management reference platform with a professional database as the backend data storage on Windows or UNIX/Linux platform. A SQL injection vulnerability exists in Mythic™ Document Management System, which can be exploited by attackers to obtain...

NexusPHP SQL Injection Vulnerability (CNVD-2017-220459)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in the takeconfirm.php file in NexusPHP version 1.5. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'conusr'...

NexusPHP SQL Injection Vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. SQL injection vulnerability in the massmail.php file in NexusPHP version 1.5. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” arises from deficiencies in protecting the SQL query structure, allowing attackers to execute arbitrary SQL commands.

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” stems from deficiencies in measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

Quest KACE Systems Management Appliance SQL Injection Vulnerability

Quest KACE Systems Management Appliance is an IT asset management appliance from Quest Software, USA. A SQL injection vulnerability in the Quest KACE Asset Management Appliance allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain...

SQL Injection Vulnerability in MZD Web Platform of Changsha Spring Culture Communication Co.

MZD network platform software is Spring's set of years of practical experience in diskless network and the actual needs of customers, independent research and development completed a server/client mode operation, to provide professional diskless guidance services for the client's management...

WordPress Loginizer SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability in WordPress Loginizer's handling of the X-Forwarded-For HTTP packet header allows remote attackers ...

SQL Injection Vulnerability in NETS9 Multi-Star System Reference Station Receiver Control Software of Guangzhou Nanfang Satellite Navigation Instrument Co.

The NETS9 is a multi-satellite system reference station receiver. A SQL injection vulnerability exists in the control software of the NETS9 multi-satellite system reference station receiver of Guangzhou Nanfang Satellite Navigation Instrument Co., Ltd. that could be exploited by an attacker to...

ShopsN v3.0 SQL Injection Vulnerability in Frontend ProductController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 beta3 version ProductController.class.php file contains a SQL injection vulnerability , due to the system failed to strictly filter the guess function . Remote attackers can exploit the vulnerability to obtain sensitive database...

ShopsN v2.0 frontend CartController.class.php file order_form function has SQL injection vulnerability

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co. An open source online store in line with enterprise-class commercial standards of the whole network system. In ShopsN v2.0 beta2 version of the front-end CartController.class.php in the orderform functi...

LMS King Professional Component SQL Injection Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system developed using PHP and MySQL. A SQL injection vulnerability exists in the cpid parameter in Joomla! LMS King Professional, which can be exploited by attackers to access or modify database data...

Hashtopus SQL Injection Vulnerability

Hashtopus is a cross-platform client-server tool for distributing hash table tasks between multiple computers. A SQL injection vulnerability exists in Hashtopus version 1.5g. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the help of the 'format' parameter...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System v2.1.6

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall System v2.1.6 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain database information...