SQL Injection Vulnerability in T_Pr***.aspx Page of KTO's Fully Intelligent Parking Video Charging System

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in the TPr.aspx page of KETOP's fully intelligent parking video charging system. Attackers c...

PT-2021-15223 · Hgiga Eip · Hgiga Eip

Name of the Vulnerable Software and Affected Versions: HGiga EIP product affected versions not specified Description: The issue is related to ineffective access control in certain pages of the HGiga EIP product, allowing attackers to access the database or perform privileged functions...

SQL Injection Vulnerability in Dongsheng Logistics Software (CNVD-2021-11043)

Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004, the company's main business expanded into three major segments, namely, logistics consulting, logistics information platform and logistics software. A SQL injection vulnerability exists in Dongsheng Logistics Software, which...

SQL Injection Vulnerability in Kuaipu-M6 Integration Management Platform System of Xiamen Crypto Information Technology Company Limited (CNVD-2021-09667)

Kuaipu-M6 integrated management platform system is a small and medium-sized enterprise integrated management and business application software developed by Xiamen Kuaipu Information Technology Co., Ltd. which has accumulated nearly 15 years of IT operation history and IT management consulting...

CVE-2020-29493

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database, causing unauthorize...

SQL Injection Vulnerability in Website Building System of Hangzhou Lebang Technology Company Limited (CNVD-2021-05505)

Hangzhou Lebang Technology Co., Ltd. provides Internet solutions for corporate brands. A SQL injection vulnerability exists in the website building system of Hangzhou Lebang Technology Co. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in yycms Movie & TV System V2.3 Admin Catalog yy***_km***.php

yycms is a movie and television system. yycms film and television system V2.3 version admin directory yykm.php SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

PT-2021-14536 · Unknown · Bw Database Interface

Name of the Vulnerable Software and Affected Versions: BW Database Interface affected versions not specified Description: The issue is related to the BW Database Interface not performing necessary authorization checks for an authenticated user. This results in an escalation of privileges, allowin...

Sql injection

UNSUPPORTED WHEN ASSIGNED EVOLUCARE ECSIMAGING aka ECS Imaging through 6.21.5 has multiple SQL Injection issues in the login form and the password-forgotten form such as /reqpassworduser.php?email=. This allows an attacker to steal data in the database and obtain access to the application. The...

CVE-2021-3118

EVOLUCARE ECSIMAGING (aka ECS Imaging) vulnerable up to version 6.21.5 due to multiple SQL Injection flaws in the login form and the password-forgotten form (e.g., /req_password_user.php?email=). The database component runs as root, enabling data theft and potential full access to the application...

Xiamen Eltong Network Technology Co., Ltd. website building system SQL injection vulnerability

Xiamen Eltong Network Technology Co., Ltd. was founded on April 13, 2005, the scope of business includes computer network technology services; computer application software sales and development, etc.. Xiamen Eltong Network Technology Co., Ltd. website building system has a SQL injection...

ZZCMS suffers from SQL injection vulnerability (CNVD-2021-03377)

ZZCMS is a content management system. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Taicang Suyi Information Technology Co.

The business scope of Taicang Suyi Information Technology Co., Ltd. includes: network engineering, webpage production, computer network technology development, software and hardware development, electronic technology research and development, graphic design and production. There is a SQL injectio...

Crimson Critical Function Missing Authentication Vulnerability

Crimson is a programming software from Red Lion. Crimson suffers from a lack of authentication vulnerability in critical functions. An attacker could exploit this vulnerability to read and modify databases without authentication in the default configuration...

Red Lion Controls Crimson 访问控制错误漏洞

Crimson is a programming software from Red Lion. Crimson suffers from a lack of authentication vulnerability in critical functions. An attacker could exploit this vulnerability to read and modify databases without authentication in the default configuration...

SQL Injection Vulnerability in Douxin Us***.cl***.php File

Douxin is an open source framework focused on the development of WeChat. A SQL injection vulnerability exists in the Douxin Us.cl.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Shenzhen Armed Network Technology Development Co.

Shenzhen at hand network technology development limited company business scope includes: computer database, computer system analysis; provide computer technical services; business e-commerce and so on. Ltd. station building system SQL injection vulnerability, attackers can use the vulnerability t...

PT-2020-17384 · Bigprof · Bigprof Online Invoicing System

Name of the Vulnerable Software and Affected Versions: BigProf Online Invoicing System versions prior to 2.9 Description: The issue is related to an unauthenticated SQL Injection in the /membership passwordReset.php endpoint, which is used for self-service password resets. An attacker can send a...

SQL Injection Vulnerability in the Frontend of Food Ordering Management System of Guangzhou Guowan Electronic Technology Co.

Ltd. ordering system is made for the local area network network ordering system, which is mainly applicable to small and medium-sized enterprises, institutions, hospitals, schools and other organizations to order food. Guangzhou Guowan Electronic Technology Co., Ltd. ordering management system in...

ABB Symphony Plus Operations and ABB Symphony Plus Historian SQL Injection Vulnerabilities

ABB Symphony Plus Operations and ABB Symphony Plus Historian are both products of ABB Switzerland.ABB Symphony Plus Operations is a management device used in industrial environments to improve operational efficiency. The device provides an easy-to-use human-machine interface that seamlessly...