CVE-2021-31827

In Progress MOVEit Transfer before 2021.0 13.0, a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used MySQL, Microsoft SQL Server...

PT-2021-19530

Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2021.0 13.0 Description A SQL injection issue has been discovered in the MOVEit Transfer web application, potentially allowing an authenticated attacker to gain unauthorized access to the database. The attacke...

Station Helpers CMS suffers from SQL injection vulnerability (CNVD-2021-37351)

Station Helpers CMS is a CMS open source system dedicated to creating a full-featured ... Station Helpers CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38027)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Lansing Sky Human Resource Management System

Ltd. is a focus on human resources management software research, development and solutions for high-tech enterprises. Lanxin Tianji human resources management system SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

BlueCMS suffers from SQL injection vulnerability (CNVD-2021-37563)

BlueCMS is a free professional local portal system developed by open source combination PHP + MYSQL. BlueCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Uncontrolled Resource Consumption

JPA Server in HAPI FHIR allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are many...

SQL Injection Vulnerability in Water Information Management Platform of Shandong Weimicro Technology Co. Ltd (CNVD-2021-35806)

Shandong Weimicro Technology Co., Ltd. is a private scientific research institution mainly engaged in technology development. Ltd. water information management platform, there is a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information in the database...

OURPHP suffers from SQL injection vulnerability (CNVD-2021-34777)

OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Yuanxin Technology (Stock) Company (CNVD-2021-35855)

Ltd. was founded in January, 2002 and is a total web planning, web design, web design, programming, web production, internet marketing, web hosting and related web design value-added services company. It is a company that provides total website planning, website design, web design, programming, w...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35843)

XIONGHAI CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35850)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35837)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34221)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34220)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Hefei Chenguang Technology Website Building System

Hefei Chenguang Technology is a company engaged in website construction and website production. Hefei Chenguang Technology website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34210)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34303)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34299)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34302)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...