CVE-2018-12022

An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled either globally or for a specific property, the service has the Jodd-db jar for database access for the Jodd framework in the classpath, and an attacker can provide an LDAP...

SQL Injection Vulnerability in Lanzhou Tianjie Network Technology Co.

Lanzhou Tianjie Network Technology Co., Ltd. is the only professional network design company in Northwest China that integrates website design, website construction, optimization and promotion, domain name registration, web hosting rental, website filing, advertisement planning, SMS, software...

Lobby Track Desktop Information Disclosure Vulnerability

Jolly Technologies Lobby Track Desktop is a desktop visitor management application from Jolly Technologies USA. The program has features such as pre-registering visitors, capturing photos and scanning driver's licenses. An information disclosure vulnerability exists in Jolly Technologies Lobby...

SQL Injection Vulnerability in Jommla! St*** Component ch*** Functions

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the ch function of the Jommla!St component, which can be exploited by an attacker to obtain sensitive information from the database...

Jommla! St*** component my*** function suffers from SQL injection vulnerability

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the my function of the Jommla!St component, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Joomla! Ye*** Vi*** Sh*** Component

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla!Ye Vi Sh component, which can be exploited by an attacker to obtain sensitive information from a database...

PT-2019-16850 · Ibm · Ibm Financial Transaction Manager For Digital Payments For Multi-Platform

Name of the Vulnerable Software and Affected Versions: IBM Financial Transaction Manager for Digital Payments for Multi-Platform version 3.1.0 Description: The issue allows a remote attacker to send specially-crafted SQL statements, which could enable the attacker to view, add, modify, or delete...

SQL injection vulnerability in Hefei Xinchen website building system

Hefei Xinchen Network Technology Co., Ltd. provides Internet services for a wide range of enterprises. Hefei Xinchen Network Technology Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

OOP CMS BLOG 1.0 Cross Site Request Forgery / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: OOP CMS BLOG 1.0 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Vendor Homepage: http://zsoft.com.bd/ Software Link :...

XAMPP SQL Injection Vulnerability

XAMPP Apache + MySQL + PHP + PERL is a build XAMPP software station integration package. XAMPP suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Five Fingers CMS v4.1.0 SQL Injection Vulnerability in Frontend

Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture. Five Fingers CMS v4.1.0 SQL injection vulnerability exists in the front-end , an attacker can exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in EmpireCMS Se***.php Page

EmpireCMS Empire Website Management System is a content management system CMS. An SQL injection vulnerability exists in the EmpireCMS Se.php page, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in the front-end wa***_mo***.asp file of Eco Times Enterprise Online Bookkeeping Management System

Eco Times Business Online Bookkeeping Management System is a financial online bookkeeping software. SQL injection vulnerability exists in the front-end wamo.asp file of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain sensitive...

SQL injection vulnerability in the front-end xi***_mo***.asp file of the Eco Times Enterprise Online Bookkeeping Management System.

Eco Times Business Online Bookkeeping Management System is a financial online bookkeeping software. There is a SQL injection vulnerability in the ximo.asp file in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in Penta Campus Network Application System Management Software

PantoSchool.Net is a complete solution for networked learning schools! A SQL injection vulnerability exists in PantoSchool.Net Application System Management Software. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL injection vulnerability in the sl***.aspx page of the Bid frontend of Qixing bidding system Bid (CNVD-2019-06239)

Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...

VulnCheck KEV: CVE-2017-18362

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database...

Sql injection

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

CVE-2017-18362

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

PT-2019-6222

Name of the Vulnerable Software and Affected Versions Kaseya VSA versions through 2017 Description The issue allows unauthenticated remote commands, providing full direct access to the Kaseya VSA database. Attackers have exploited this in the wild to download and execute ransomware payloads on al...