SQL injection vulnerability in the sl***.aspx page of the Bid frontend of Qixing bidding system Bid (CNVD-2019-06239)

Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...

VulnCheck KEV: CVE-2017-18362

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database...

Sql injection

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

CVE-2017-18362

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

CVE-2017-18362

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

PT-2019-6222

Name of the Vulnerable Software and Affected Versions Kaseya VSA versions through 2017 Description The issue allows unauthenticated remote commands, providing full direct access to the Kaseya VSA database. Attackers have exploited this in the wild to download and execute ransomware payloads on al...

Changsha Tianxin District Binnet Network Technology Service Department's website building system pc***/?classa suffers from SQL injection vulnerability.

Changsha Tianxin District Bin net network technology service department is a focus on small and medium-sized enterprise website set up, for the company, enterprises, individuals to provide more perfect, more efficient services and solutions to a company. Changsha City, Tianxin District, Bin netwo...

SQL injection vulnerability in the co***.aspx and de***.aspx files in the frontend of Gallery, a Qixing image & video library.

Qixing Image & Video GalleryGallery is mainly used to store images or videos in the company. SQL injection vulnerability exists in the frontend co.aspx and de.aspx files of the Qixing Image & Video Gallery, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Qingdao Shangzhixin Network Technology Co.

Qingdao Business to letter network technology limited company, is a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services of high-tech specialized companies. There is a SQL injection vulnerability in sh.php, which can be exploite...

SQL Injection Vulnerability in Sh***.asp File of Shop7z Online Shopping System Fashion Edition

Shop7z online shopping system is ASP online store platform software, providing comprehensive application services based on Internet solutions. Shop7z online shopping system fashion version of the front Sh.asp file SQL injection vulnerability, an attacker can exploit the vulnerability to obtain...

Shop7z Online Shopping System Fashion Edition Frontend Sh***.asp File SQL Injection Vulnerability

Shop7z online shopping system is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer and cell phone version and APP seamless combination of data as a whole. Shop7z online shopping system fashion version of the front Sh.asp file SQL injection vulnerability...

SQL Injection Vulnerability in Showo***.asp File of Shop7z Online Shopping System Fashion Edition

Shop7z online shopping system is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer and cell phone version and APP seamless combination of data as a whole. Shop7z online shopping system fashion version of the foreground Showo.asp file there is a SQL injection...

SQL Injection Vulnerability in YunGouCMS v7.1

YunGouCMS is a website builder provided by Taurus Networks for the cloud purchasing model. YunGouCMS v7.1 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2019-3906

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents...

SQL Injection Vulnerability in Website Building System of Zhongshan Shangyou Network Technology Co.

Zhongshan Shangyou Network Technology Co., Ltd. is a company dedicated to Internet branding and Internet marketing. There is a SQL injection vulnerability in the website building system of Zhongshan Shangyou Network Technology Co., Ltd, which can be exploited by attackers to obtain sensitive...

SQL injection vulnerability in the ad***.php page of YXcmsApp 1.4.7 (CNVD-2019-05336)

YXcmsApp is a PHP and MySQL based enterprise building content management system CMS. A SQL injection vulnerability exists in the ad.php page of YXcmsApp 1.4.7, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2019-5720

includes/db/class.reflinesdb.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field that can allow the attacker to grab the entire database of the application via the voidtransaction.php filterType parameter...

CVE-2019-5720

CVE-2019-5720 affects FrontAccounting 2.4.6. The vulnerability is a SQL Injection in includes/db/class.reflines_db.inc, exploitable via the reference field using the void_transaction.php?filterType parameter, potentially allowing an attacker to extract the entire database. Connected sources (RH, ...

SQL Injection Vulnerability in Vansco's Website Builder System

Ltd. is an Internet service company integrating website construction, software development, website planning, graphic design, software development, website operation, space domain name service and other Internet basic services. There is a SQL injection vulnerability in Visco's website building...

Xi'an Bailian website builder system has SQL injection vulnerability

Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an BaiLian website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain...