SQL Injection Vulnerability in Jinwei Mobile Mall of Hubei Taoma Qianwei Information Technology Co.

Jinwei Mobile Mall is a mall management system for micro-business customers with public numbers. Ltd. Jinwei Mobile Mall has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

RockOA SQL Injection Vulnerability (CNVD-2021-10484)

RockOA Xinhuo is an open source office OA system. Rockoa v1.8.7 version of the existence of SQL injection vulnerability , the vulnerability wordModel.php parameters in the user input is not effectively filtered , a remote attacker through the injection of SQL statements to execute the acquisition...

Design/Logic Flaw

An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as wel...

SQL injection vulnerability in website builder system ne***.aspx page of Hangzhou Orange Promise Technology Co.

Hangzhou Orange Promise Technology Co., Ltd. is a company specializing in Internet branding and Internet marketing. Hangzhou Orange Promise Technology Co., Ltd. station building system ne.aspx page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

RockOA SQL注入漏洞

RockOA Xinhuo is an open source office OA system. Rockoa v1.8.7 version of the existence of SQL injection vulnerability , the vulnerability wordModel.php parameters in the user input is not effectively filtered , a remote attacker through the injection of SQL statements to execute the acquisition...

SQL injection vulnerability in ne***.php page of website building system of Guangzhou Chuangke Network Technology Co.

Guangzhou Chuangke Network Technology Co., Ltd. is a business service company that provides customers with marketing website construction, network marketing promotion, website hosting operation, website production, website design, website promotion and maintenance, website SEO optimization, WeCha...

SQL injection vulnerability in pr***.php page of website building system of Guangzhou Chuangke Network Technology Co.

Guangzhou Chuangke Network Technology Co., Ltd. is a business service company that provides customers with marketing website construction, network marketing promotion, website hosting operation, website production, website design, website promotion and maintenance, website SEO optimization, WeCha...

SQL injection vulnerability in pr***.asp page of website building system of Ruian UB Technology Co.

Ltd. is a social public to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM desig...

SQL injection vulnerability in SeaCMS backend (CNVD-2021-14497)

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A SQL injection vulnerability exists in the backend of SeaCMS. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerabilities in the Website Building System of Shenyang Uno Network Technology Co.

Shenyang Uno Network Technology Co., Ltd. mainly provides website production and host maintenance, domain name registration services and network marketing and promotion programs. Shenyang Uno Network Technology Co., Ltd. website building system there is a SQL injection vulnerability, attackers ca...

SQL Injection Vulnerability in wise on-demand Server

wise on-demand server software is server-side distribution software that provides streaming playback of audio and video files. A SQL injection vulnerability exists in the sewise on-demand server, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in UFIDA U8-OA (CNVD-2021-12781)

Founded in 1988, UFIDA is a leading global provider of cloud services and software for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA. An attacker can exploit the vulnerability to gain access to sensitive database information...

Bosch FSM-2500 server 和 Bosch FSM-5000 server 信任管理问题漏洞

Bosch FSM-2500 and Bosch FSM-5000 are both panel-ready fire control systems from Bosch of Germany. Bosch FSM-2500 and Bosch FSM-5000 suffer from a hard-coded vulnerability that could be exploited by remote attackers to submit special requests to gain unauthorized access to the database system wit...

SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co. Ltd (CNVD-2021-10555)

Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...

SQL Injection Vulnerability in ZDNT's Customer Resource Management System (CNVD-2021-10558)

ZDNT Customer Resource Management System is a foreign trade management and foreign trade customer management and other functions of the software. There is a SQL injection vulnerability in ZJUENT Customer Resource Management System, which can be exploited by attackers to obtain sensitive informati...

SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co. Ltd (CNVD-2021-10553)

Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...

Vulnerabilities fixed in Cisco Unified Communications

Cisco has fixed multiple vulnerabilities in several Unified Communications products. An authenticated malicious person remote can exploit the vulnerabilities to gain access data on the underlying file system or in the underlying database. This includes hashed passwords stored in this database...

CVE-2021-22850

HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions...

CVE-2021-22850

HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions...

HGiga EIP Access Control Error Vulnerability

Hgiga HGiga EIP is a product of China Hengji Hgiga Corporation. An Access Control Error vulnerability exists in the HGiga EIP product, which stems from a lack of invalid access control on certain pages and can be exploited by an attacker to access a database or perform privileged functions...