Chengdu Firefox Technology Co., Ltd. website builder system suffers from SQL injection vulnerabilities

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion and development of new technology areas of the network, mainly dedicated to the enterprise information technology services of professional network companies, with a number of Internet-related products and services. Chengdu Firef...

SQL injection vulnerability in seacms backend (CNVD-2019-40979)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Zigong Tianqi Network System Co.

Zigong Tianqi Network System Co., Ltd. was founded in 1999, the company is committed to network construction. There is a SQL injection vulnerability in the website building system of Zigong Tianqi Network System Co., Ltd, which can be exploited by attackers to obtain sensitive information from th...

SQL Injection Vulnerability in Business-to-Business Website Building System

Qingdao Business to Faith Network Technology Co., Ltd. was founded in March 2001, initially a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services, high-tech specialized companies, is one of the first batch of domestic Internet...

Unauthorised File Read Or Deletion

Voyager is vulnerable to unauthorised file access. Any user with access to admin and compass can read or delete any files, allowing an attacker to steal .env file of the application and to sign his own new session and cookie with secret application key or just dropping the database, knowing...

ShopsN open source mall system ed*** function SQL injection vulnerabilities exist

ShopsN free version of B2C e-commerce is a product of Shanghai Yisu Network Technology Co. ShopsN open source mall system ed function SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

Yantai Cloud Pulse Network CMS website building system has SQL injection vulnerability

Yantai Cloud Pulse Network Technology Co., Ltd. is a professional website construction and search engine marketing services provider. Dedicated to small and medium-sized enterprises network marketing services, and website construction, enterprise version of the PC website construction, three-in-o...

SQL Injection Vulnerability in Kaixin Filing System

Qixing File System is a functional system that supports personnel statistics, personnel change records and other functions. File SystemProfile contains employee files, company contracts and employee training management. Qixing File System suffers from a SQL injection vulnerability, which can be...

SQL injection vulnerability in p****t.asp page of basic website building system of Shenzhen Tiandixin Network Technology Co.

Tiandixin network was founded in 2010, is a strategic research and development-oriented enterprises, many large-scale project experience, more than tens of thousands of Chinese enterprises common choice of website platform builder, the company mainly focuses on corporate website construction, Bai...

SQL Injection Vulnerability in Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

SQL Injection Vulnerability in cp***.php of Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

PT-2019-14650

Name of the Vulnerable Software and Affected Versions Progress MOVEit Transfer versions 2018 SP2 before 10.2.4 Progress MOVEit Transfer versions 2019 before 11.0.2 Progress MOVEit Transfer versions 2019.1 before 11.1.1 Description The issue allows an unauthenticated attacker to gain unauthorized...

WordPress sirv plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress sirv plugin versions prior to 1.3.2. The vulnerability stems...

CVE-2019-16264

In Escuela de Gestion Publica Plurinacional EGPP Sistema Integrado de Gestion Academica GESAC v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database...

CVE-2019-16264

In Escuela de Gestion Publica Plurinacional EGPP Sistema Integrado de Gestion Academica GESAC v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database...

Sql injection

In Escuela de Gestion Publica Plurinacional EGPP Sistema Integrado de Gestion Academica GESAC v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database...

SQL injection vulnerability in pr***.php file of website building system of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is engaged in marketing planning, the company provides website design, graphic design, program development and Internet marketing. There is a SQL injection vulnerability in the pr.php file of the website building system of Suzhou Ernst Network Technology...

Shandong Qiangbi Information Technology Co., Ltd. website building system has SQL injection vulnerabilities

Shandong Qiangbi Information Technology Co., Ltd. is oriented to enterprise information service-oriented Internet application service enterprises. There is a SQL injection vulnerability in the website building system of Shandong Qiangbi Information Technology Co. Attackers can use the vulnerabili...

CVE-2019-16264: Improper Neutralization of Special Elements used in an SQL Command

In Escuela de Gestion Publica Plurinacional EGPP Sistema Integrado de Gestion Academica GESAC v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database...

PT-2019-14606

Name of the Vulnerable Software and Affected Versions EGPP Sistema Integrado de Gestion Academica GESAC version 1 Description The issue concerns a SQL injection vulnerability in the authentication form of the affected software. Specifically, the username parameter is vulnerable, allowing attacker...