Nextcloud: user can bypass password enforcement when federated sharing is enabled

If the admin forces password for link shares and federated shares are enabled, users can bypass this enforcement. Tested with Nextcloud 18.0.3 Steps to reproduce: - enable password enforcement for link shares as admin - as user1 create a link share with password - open the link share in a separat...

SQL Injection Vulnerability in Qingdao Huishang Media Co.

Qingdao Hui Shang Media Co., Ltd, is an operator focusing on providing enterprises with services such as online marketing, brand design, micro-marketing, and software customization and development. There is a SQL injection vulnerability in the website system of Qingdao Hui Shang Media Co., Ltd,...

ForU CMS suffers from SQL injection vulnerability (CNVD-2020-25783)

ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

SQL Injection Vulnerability in DSMall

DSMall is a comprehensive mall platform system. DSMall suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Shenzhen Point Search Technology Co., Ltd. website building system has SQL injection vulnerabilities

Shenzhen Point Search Technology Co., Ltd. is an Internet + lawyers + private customized service providers, specializing in providing lawyers with domain name registration, website construction, optimization and promotion, website hosting and maintenance, media release, full network marketing and...

SQL Injection Vulnerability in Jinan Cabbage Network Technology Co.

Jinan Cabbage Network Technology Co., Ltd. was founded in 2014, business visits include website construction domain name registration, web hosting, web design, program customization and development, technology outsourcing, WAP mobile site construction, WeChat and small program custom development,...

SQL Injection Vulnerability in Heybbs us***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. The Heybbs us.php page suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

U-Mail mail server software suffers from SQL injection vulnerability ( CNVD-2020-26500).

U-Mail mail server software is a domestic first-tier brand that really provides lifetime free upgrades of the mail system, including data upgrades of the mail system, antivirus engine, anti-spam engine, etc. U-Mail mail server software is the first-tier brand that really provides lifetime free...

SQL injection vulnerability in ne**.php of website building system of Chaozhou Weipai Network Technology Co.

Chaozhou Weipai Network Technology Co., Ltd. focuses on micro-platform planning and development, leveraging on the WeChat public platform and open platform, customized display, interaction, sharing, promotion and sales in one of the micro-platform. Chaozhou City Weipai Network Technology Co., Ltd...

Chaozhou Weipai Network Technology Co., Ltd. website builder system pro****.php has SQL injection vulnerability

Chaozhou Weipai Network Technology Co., Ltd. focuses on micro-platform planning and development, leveraging on the WeChat public platform and open platform, customized display, interaction, sharing, promotion and sales in one of the micro-platform. Chaozhou City Weipai Network Technology Co., Ltd...

SQL injection vulnerability in the bi***.cl***.php file of UQCMS Cloud Business System

UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system bi.cl.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

CVE-2019-12122

An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected...

CVE-2020-3922

LisoMail, by ArmorX, allows SQL Injections, attackers can access the database without authentication via a URL parameter manipulation...

CVE-2020-3922

LisoMail, by ArmorX, allows SQL Injections, attackers can access the database without authentication via a URL parameter manipulation...

CVE-2019-20495

cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming SEC-531...

CVE-2019-20495

cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming SEC-531...

SQL injection vulnerability in cp_***.php file of website building system of Henan Lisuo Internet Information Technology Co.

Henan LISO Internet Information Technology Co., Ltd. is a comprehensive Internet service organization that provides network solutions for enterprises to enhance the value of their Internet marketing. Henan Lishou Internet Information Technology Co., Ltd. building system cp.php file there is a SQL...

SQL Injection Vulnerability in YIXUNCMS 2.0.4.91SD by EaseUS Software Studio

EaseUS software is a BS architecture software application and development team, focusing on serving domestic small and medium-sized business units, institutions at all levels of the website platform and WEB application system design and development. EaseUS Software Studio YIXUNCMS 2.0.4.91SD...

Heybbs Micro Community v1.2 suffers from SQL injection vulnerability (CNVD-2020-23507)

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs Micro Community v1.2 has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...