Progress Software MOVEit Transfer SQL注入漏洞

Progress Software MOVEit Transfer is a suite of file transfer software from Progress Software, USA. A security vulnerability exists in MOVEit Transfer that allows an authenticated attacker to gain unauthorized access to a database...

CVE-2020-24862

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...

Sourcecodester Medical Store Point SQL注入漏洞

Sourcecodester Medical Store Point is a Sourcecodester open source application. A Pharmacy/Medical Store Point of Sale POS system. Pharmacy Medical Store and Sale Point suffers from a SQL injection vulnerability that originates from a blind time-based SQL injection attack performed on the Medical...

Fangfa FDCMS SQL注入漏洞

FDCMS is a PHP-based content management system of Sichuan Method Digital Technology Co. A SQL injection vulnerability exists in FDCMS version 4.0. An attacker can use this vulnerability to inject malicious SQL via Admin/Lib/Action/FloginAction.class.php to obtain database records...

SQL Injection Vulnerability in SEACMS (CNVD-2021-41711)

SEACMS is a video-on-demand system designed for webmasters with different needs. SEACMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Advantech iView² suffers from SQL injection vulnerability

iView² is a network element management system based on SNMP configuration and management of B B SmartWorx chassis and module products It is a WEB application whose main functional programs are located on a WEB server and can be accessed by all users via a WEB browser. An SQL injection vulnerabili...

Shandong Juheng Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Shandong Juheng Network Technology Co., Ltd, is a leading domestic digital platform service provider. Shandong Juheng Network Technology Co., Ltd. website building system exists SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Ruiyi Education Cloud Teaching Analysis System

Ruiyi Education Technology Co., Ltd. is a Ruiyi intelligent teaching overall solution, integrating the self-developed Ruiyi cloud teaching system, cloud resource library system, cloud question bank system. There is a SQL injection vulnerability in RuiYi Education Cloud Teaching Analysis System,...

SQL Injection Vulnerability in SEMCMS Shop Backend (CNVD-2021-40213)

SEMCMS Shop is a self-developed open source online store btc system. SQL injection vulnerability exists in SEMCMS Shop backend. Attackers can use the vulnerability to obtain sensitive information in the database...

BEESCMS suffers from SQL injection vulnerability (CNVD-2021-40206)

BEESCMS adopts PHP+MYSQL, featuring multi-language system and easy expansion of content modules. BEESCMS has SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

CVE-2021-20720

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors...

SQL Injection Vulnerability in Shipping 100 Autoship System

Shipping 100 is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in the Shipment 100 Autoship System. An attacker can exploit the vulnerability to obtain sensitive information from the database...

CVE-2021-31827

In Progress MOVEit Transfer before 2021.0 13.0, a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used MySQL, Microsoft SQL Server...

CVE-2021-31827

In Progress MOVEit Transfer before 2021.0 13.0, a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used MySQL, Microsoft SQL Server...

SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38027)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Lansing Sky Human Resource Management System

Ltd. is a focus on human resources management software research, development and solutions for high-tech enterprises. Lanxin Tianji human resources management system SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

Station Helpers CMS suffers from SQL injection vulnerability (CNVD-2021-37351)

Station Helpers CMS is a CMS open source system dedicated to creating a full-featured ... Station Helpers CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

BlueCMS suffers from SQL injection vulnerability (CNVD-2021-37563)

BlueCMS is a free professional local portal system developed by open source combination PHP + MYSQL. BlueCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Uncontrolled Resource Consumption

JPA Server in HAPI FHIR allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are many...

SQL Injection Vulnerability in Water Information Management Platform of Shandong Weimicro Technology Co. Ltd (CNVD-2021-35806)

Shandong Weimicro Technology Co., Ltd. is a private scientific research institution mainly engaged in technology development. Ltd. water information management platform, there is a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information in the database...