CVE-2019-7488

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

SQL Injection Vulnerability in Hula Enterprise Website Management System of Qingdao Scorch Culture Media Co.

Hula enterprise website management system is based on ThinkPHP5 framework development, security and efficiency, including all the features of ThinkPHP5. Qingdao Scorch Culture Media Co., Ltd. Hula enterprise website management system has a SQL injection vulnerability, which can be exploited by...

Zhengzhou Rui Ma Technology Co., Ltd. website building system SQL injection vulnerability

Zhengzhou Rui Ma Technology specializes in providing Zhengzhou website construction, Zhengzhou website production, Zhengzhou website promotion, Zhengzhou website optimization, Zhengzhou seo optimization, Zhengzhou promotion software. Zhengzhou Rui Ma Technology Co., Ltd. website building system...

SQL Injection Vulnerability in the Website Building System of Beijing Transcend Infinite Information Technology Co.

Beijing Beyond Unlimited Information Technology Co. SQL injection vulnerability exists in the website building system of Beijing Beyond Infinity Information Technology Co. An attacker can utilize the vulnerability to obtain sensitive information of the database...

SQL Injection Vulnerability in the Website Building System of Jingteng Multimedia Co.

With the marketing planning and project manager system, Jingteng Multimedia Co., Ltd. analyzes customers' strengths and provides users with exclusive suggestions for website setup. A SQL injection vulnerability exists in the website builder system of Jinteng Multimedia Co. An attacker can exploit...

DEBIAN-CVE-2019-19830

core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...

SQL Injection Vulnerability in Yunye CMS Backend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in the Website Building System of Guangzhou HeYou Network Technology Co.

Guangzhou HY Network Technology Co., Ltd. is a comprehensive enterprise specializing in providing customers with a series of corporate services such as website, mailbox, advertising, software, finance and tax. There is a SQL injection vulnerability in the website builder system of Guangzhou Hopef...

SQL Injection Bypass Vulnerability in Web Security Dog (Apache Edition)

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition suffers from a SQL injection bypass vulnerability. Attackers use the vulnerability to bypa...

CVE-2019-12414

In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab...

CVE-2019-12413

CVE-2019-12413 affects Apache Superset prior to 0.31. A crafted complex query allows a user to query database metadata they have no access to, revealing information via an information-disclosure vulnerability. The available sources consistently describe this as a metadata/information-disclosure i...

TuziCMS 2.0.6 SQL injection vulnerability in frontend mo*** us***.cl***.php

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS 2.0.6 SQL injection vulnerability exists in the front-end mo us.cl.php, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Catapult OA Mobile Cloud Office System

Catapult OA mobile cloud office system, the use of industry-leading cloud computing technology, based on the traditional Internet and mobile Internet, innovative cloud services + cloud terminal application mode, for enterprise users to provide an account management aggregation application service...

SQL Injection Vulnerability in PM2 Project Management System of Beijing Bangyong Technology Co.

BONYON is committed to project management research and development, integrating project management consulting, software development, project management training and education as one of the professional foreign-funded companies. The PM2 project management system of Beijing BangYong Technology Co.,...

SQL Injection Vulnerability in UQCMS Cloud Business System ca***.cl***.php Page

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. UQCMS cloud business system ca.cl.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

CVE-2019-17428

An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the database to be decrypted...

SQL injection vulnerability in website building system of Shantou Sanhut Technology Co. Ltd (CNVD-2020-02273)

Ltd. is a company that focuses on designing, producing and providing personalized e-commerce solutions for enterprises. Ltd. website building system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Bypass Vulnerability in CloudLock Server Side for Windows (CNVD-2020-02256)

CloudLock is a free server security management software based on operating system kernel hardening technology, which supports cross-platform real-time, batch and remote security management of windows/linux servers. The Windows version of CloudLock server-side SQL injection bypass vulnerability ca...

SQL Injection Vulnerability in Tongxia Internet Website Building System (CNVD-2020-02261)

Tongxia Interconnection is a newly established technical team, with website construction as the main focus. Undertake various companies, enterprises, factories, stores, individual website construction, website mall construction, foreign trade website construction, portal construction. There is a...

SQL Injection Vulnerability in pr***.asp Page of Time Network Website Builder System

Time Network is a service outsourcing enterprise that integrates the development of network application technology, creative website design, network marketing and promotion services, and provides a full set of network marketing solutions, and is a professional company that focuses on...