3993 matches found
SeaCMS suffers from SQL injection vulnerability (CNVD-2020-23523)
SesCMS is a PHP content management system a set of programs adaptive computer, cell phone, tablet, APP multiple terminal entrance station-building tool. SeaCMS SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...
Chianxin Website Defender SQL Injection Rule Bypassing
There are SQL injection rule bypasses in the Chianson Web Defender product, which can be utilized by attackers to bypass its security protection and gain access to sensitive information in the database of the protected website...
SQL injection vulnerability in it***.php file of Jinwei Mobile Mall System
Jinwei mobile mall system is a micro-business customers with a public number, imitation hand Tao page layout, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory control, subdivided...
SQL injection vulnerability in us***.php file of Jinwei Mobile Mall system
Jinwei mobile mall system is a micro-business customers with a public number, imitation hand Tao page layout, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory control, subdivided...
SQL injection vulnerability in ad***_bo***_cl***.php page of XYCMS message board PHP version
XYCMS message board PHP version is to php + MySQL for the development of php message board source code, software for the ordinary message board, can be widely used in corporate websites and other websites that need a message board to use. XYCMS message board PHP version adbocl.php page SQL...
SQL Injection Vulnerability in Website Building System of Guangzhou Chuangke Network Technology Co.
Ltd. is to provide Internet services, including marketing website construction, network marketing and promotion, website hosting operations, website production, website design, website promotion and maintenance, website SEO optimization, WeChat marketing and development, corporate brand marketing...
QIWI: Remote Code Execution on contactws.contact-sys.com via SQL injection in TCertObject operation "Delete"
Summary The API interface on https://contactws.contact-sys.com:3456/ accepts a body to interact with the server's AppServ object. Because of insufficient input validation, an attacker can abuse the ID parameter to inject arbitrary SQL statements into the underlying prepared statement. This leads ...
SQL injection vulnerability in im***.asp page of Ebay website building system of Jinan Dotchuang Network Technology Co.
Ltd. is committed to providing governments, enterprises, and network providers with high-tech network application solutions, small and medium-sized office software development and customization, system platform development and its value-added services. There is a SQL injection vulnerability in th...
WP Advanced Search < 3.3.4 - Unauthenticated Database Access and Remote Code Execution (RCE)
Arbitrary database queries can be executed in an unauthenticated context of the "WP-Advanced-Search Plugin". E.g. a new administrative account could be added to the WordPress instance, a malicious plugin deployed and therefore Remote Code Execution RCE would be possible in the end. PoC PoC: Updat...
SQL Injection Vulnerability in Jinwei Smart Restaurant
Jinwei Intelligent Restaurant is a free restaurant management software, easy and convenient to operate, suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, western food, hot pot restaurant and other kinds of catering business. Jinwei Smart Restaurant suffers...
SQL Injection Vulnerability in the Most Earthly Group Buying System
The most earth group-buying system is the most professional and powerful GroupOn mode of free open source group-buying system platform. The most earth group-buying system SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive information in the database...
CVE-2019-19607
A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to extract sensitive information from the databas...
Xiamen Yishang Network Technology Co., Ltd. website system SQL injection vulnerability
Xiamen Yi Shang Network Technology Co., Ltd. is a company that provides one-stop service of website construction and Internet marketing. A SQL injection vulnerability exists in the website builder system of Xiamen Ecommerce Network Technology Co. An attacker can use this vulnerability to obtain...
SQL Injection Vulnerability in Jinwei Supermarket Cashiering System (CNVD-2020-22751)
Jinwei Supermarket Cashier System is a code-sweeping cashier tool designed for small and medium-sized supermarkets and community convenience stores. SQL injection vulnerability exists in Jinwei Supermarket Cashier System, which can be exploited by attackers to obtain sensitive information from th...
SQL Injection Vulnerability in Jinwei Mobile Mall System
Jinwei Mobile Mall System is a mall management system for micro-business customers with public numbers. A SQL injection vulnerability exists in Jinwei Mobile Mall System, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in Jinwei Supermarket Cashier System (CNVD-2020-22269)
Jinwei Supermarket Cashiering System is a code-sweeping cashiering tool designed for small and medium-sized supermarkets and community convenience stores. SQL injection vulnerability exists in Jinwei Supermarket Cashier System, which can be exploited by attackers to obtain sensitive information...
SQL Injection Vulnerability in Jinwei Supermarket Cashiering System
Jinwei Supermarket Cashier System is a code-sweeping cashier tool designed for small and medium-sized supermarkets and community convenience stores. SQL injection vulnerability exists in Jinwei Supermarket Cashier System, which can be exploited by attackers to obtain sensitive information from th...
SQL Injection Vulnerability in Jinwei Mobile Mall System (CNVD-2020-22753)
Jinwei Mobile Mall System is a mall management system for micro-business customers with public numbers. A SQL injection vulnerability exists in Jinwei Mobile Mall System, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in YouYi Cms Movie & TV System
Youyi cms is a movie and TV station building system. UE cms movie and TV system has a SQL injection vulnerability, an attacker can build clever URL requests to get the database data running in the background of the server...