SQL Injection Vulnerability in e-cology 8.0 Frontend of Shanghai Panmicro Network Technology Co.

e-cology is a collaboration platform. A SQL injection vulnerability exists in the frontend of e-cology 8.0 of Shanghai Panmicro Networks Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Mini-Tmall Framework Front and Backend

Mini Tmall Mini Tmall is a Spring Boot-based integrated B2C e-commerce platform, the requirements of the design of the main reference Tmall shopping process: users start from registration, to complete the login, browse the products, add a shopping cart, place an order, confirm receipt, evaluation...

SQL Injection Vulnerability in an Interface of e-office of Shanghai Panmicro Network Technology Co.

Ltd. e-office system is a set of collaborative office system. A SQL injection vulnerability exists in one of the interfaces of e-office, which can be exploited by attackers to obtain sensitive information from the database...

Perl DBI: Multiple vulnerabilities

Background A database access module for the Perl programming language. Description Multiple vulnerabilities have been discovered in the Perl module DBI. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround Ther...

Knight CMS of Taiyuan Xunyi Technology Co., Ltd. suffers from SQL injection vulnerability (CNVD-2020-58523)

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS is vulnerable to SQL injection. Attackers can use the vulnerability to obtain sensitive information in the database...

ZZCMS suffers from SQL injection vulnerability (CNVD-2020-58517)

ZZCMS is a content management system for Webmaster Merchants. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

ZZCMS 2020 suffers from SQL injection vulnerability (CNVD-2020-58514)

ZZCMS is a content management system for Webmaster Merchants. ZZCMS 2020 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

ZZCMS suffers from SQL injection vulnerability (CNVD-2020-57393)

ZZCMS is a free website builder developed in asp language. ZZCMS suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to read database information...

CVE-2020-2242

A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified credentials...

NiuShop suffers from SQL injection vulnerability (CNVD-2020-56379)

Niushop is designed by Shanxi Niu Cool Information Technology Co., Ltd. design, research and development of a set of PHP open source shopping center. NiuShop has a SQL injection vulnerability, which can be exploited by attackers to obtain website database data...

Multiple systems of Xi'an Zumibo Intelligent Technology Co., Ltd. suffer from universal password login vulnerability

Ltd. is a company that focuses on providing customized development of industrial intelligent control, and provides detailed and perfect overall solutions for industrial control enterprises. Xi'an Xibo Intelligent Technology Co., Ltd. has a universal password login vulnerability in several systems...

SQL injection vulnerability in ne***.php page of website building system of Jinan Cabbage Network Technology Co.

Jinan Cabbage Network Technology Co., Ltd. is a company engaged in website construction, technology outsourcing, WAP mobile site construction, micro letter and small program custom development, system UI and graphic design, PHP system development, Netease enterprise mailbox. There is a SQL...

SQL Injection Vulnerability in Shijiazhuang Diyi Advertising Co.

Shijiazhuang Diyi Advertising Co., Ltd. is a company dedicated to corporate branding and marketing planning. Shijiazhuang Diyi Advertising Co., Ltd. website building system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

SQL Injection Vulnerability in the Website Building System of Longcheng Internet Wenzhou Network Company (CNVD-2020-54843)

Wenzhou Longcheng Internet Technology Co., Ltd - is engaged in website construction, website production, website design, graphic design, website optimization, website promotion, album design and other integrated Internet companies. Long Cheng Internet Wenzhou Network Company website building syst...

SQL Injection Vulnerability in East Technology Limited's Website Building System

East Technology Limited is a Hong Kong based web design and mobile application company. A SQL injection vulnerability exists in East Technology Limited's website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Taiwan Qualcomm's Website Builder System

Ares Internet is a company that specializes in Sheng Yuan interior design, real estate web design, web design, fast website, template, advertisement design, graphic design, and website building. A SQL injection vulnerability exists in the website builder system of Taiwan Ares Network, which can b...

SQL Injection Vulnerability in phpweb finished website builder system

PHPWEB system is developed with PHP+MYSQL technology, with clear architecture and easy-to-maintain code. Support pseudo-static function, can generate google and baidu map, support keywords and descriptions, in line with SEO standards. phpweb finished website builder system has a SQL injection...

Critical Flaws in WordPress Quiz Plugin Allow Site Takeover

A plugin that is designed to add quizzes and surveys to WordPress websites has patched two critical vulnerabilities. The flaws can be exploited by remote, unauthenticated attackers to launch varying attacks – including fully taking over vulnerable websites. The plugin, Quiz and Survey Master, is...

CVE-2020-15925

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPFXPAR1 parameter...

SQL injection vulnerability in im***.asp page of website building system of Hanzhong Qiyuan Power Network Co.

Hanzhong Qiyuan Power Network Co., Ltd. is a high-tech Internet technology service provider. Hanzhong Qiyuan Power Network Co., Ltd. website building system im.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...