SQL Injection Vulnerability in UsualToolCMS of Chengdu Comfidonte Network Technology Co.

UsualToolCMS UTCMS is a content management system as well as a rapid site building framework. UsualToolCMS by Chengdu Comfidonte Network Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2019-10205

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry...

SQL Injection Vulnerability in opensns system

OpenSNS is an open-source social networking system from Jiaxing Wantsky Information Technology Company in China. The opensns system suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Ocean CMS Backend ad***_vi***.php File

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. There is a SQL injection vulnerability in the advi.php file in the background of Ocean CMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in pr***.asp Page of Shanghai Silverfox Information Technology Co.

Shanghai Silver Fox Information Technology Co., Ltd Silver Fox Power is a high-tech company dedicated to enterprise information technology services. Shanghai Silverfox Information Technology Co., Ltd. building system pr.asp page SQL injection vulnerability exists. Attackers can use the...

SQL injection vulnerability in the us***.php page of BaiLian Mall system

BaiLian mall system is a set of computer version of the mall + mobile version of the website + micro-mall enterprise weibo public number secondary development + BaiLian bearing network www.bearing.cn professional promotion and publicity in one of the new marketing solutions. SQL injection...

SQL Injection Vulnerability in Panmicro e-cology OA System

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...

Default credentials

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

CVE-2019-7488

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

SQL Injection Vulnerability in Hula Enterprise Website Management System of Qingdao Scorch Culture Media Co.

Hula enterprise website management system is based on ThinkPHP5 framework development, security and efficiency, including all the features of ThinkPHP5. Qingdao Scorch Culture Media Co., Ltd. Hula enterprise website management system has a SQL injection vulnerability, which can be exploited by...

Zhengzhou Rui Ma Technology Co., Ltd. website building system SQL injection vulnerability

Zhengzhou Rui Ma Technology specializes in providing Zhengzhou website construction, Zhengzhou website production, Zhengzhou website promotion, Zhengzhou website optimization, Zhengzhou seo optimization, Zhengzhou promotion software. Zhengzhou Rui Ma Technology Co., Ltd. website building system...

SQL Injection Vulnerability in the Website Building System of Beijing Transcend Infinite Information Technology Co.

Beijing Beyond Unlimited Information Technology Co. SQL injection vulnerability exists in the website building system of Beijing Beyond Infinity Information Technology Co. An attacker can utilize the vulnerability to obtain sensitive information of the database...

SQL Injection Vulnerability in the Website Building System of Jingteng Multimedia Co.

With the marketing planning and project manager system, Jingteng Multimedia Co., Ltd. analyzes customers' strengths and provides users with exclusive suggestions for website setup. A SQL injection vulnerability exists in the website builder system of Jinteng Multimedia Co. An attacker can exploit...

DEBIAN-CVE-2019-19830

core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...

SQL Injection Vulnerability in Yunye CMS Backend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Bypass Vulnerability in Web Security Dog (Apache Edition)

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition suffers from a SQL injection bypass vulnerability. Attackers use the vulnerability to bypa...

SQL Injection Vulnerability in the Website Building System of Guangzhou HeYou Network Technology Co.

Guangzhou HY Network Technology Co., Ltd. is a comprehensive enterprise specializing in providing customers with a series of corporate services such as website, mailbox, advertising, software, finance and tax. There is a SQL injection vulnerability in the website builder system of Guangzhou Hopef...

CVE-2019-12414

In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab...

CVE-2019-12413

CVE-2019-12413 affects Apache Superset prior to 0.31. A crafted complex query allows a user to query database metadata they have no access to, revealing information via an information-disclosure vulnerability. The available sources consistently describe this as a metadata/information-disclosure i...

TuziCMS 2.0.6 SQL injection vulnerability in frontend mo*** us***.cl***.php

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS 2.0.6 SQL injection vulnerability exists in the front-end mo us.cl.php, which can be exploited by attackers to obtain sensitive database information...