[SECURITY] Fedora 28 Update: unixODBC-2.3.7-1.fc28

Install unixODBC if you want to access databases through ODBC. You will also need the mariadb-connector-odbc package if you want to access a MySQL or MariaDB database, and/or the postgresql-odbc package for Postgre SQL...

S-CMS School Building System SQL Injection Vulnerability at Forum Page (CNVD-2018-19275)

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A SQL injection vulnerability exists in the forum page of the S-CMS School Building System. An attacker can exploit the vulnerability to...

Online Quiz Maker 1.0 - 'catid' SQL Injection

Exploit Title: Online Quiz Maker 1.0 - 'catid' SQL Injection Dork: N/A Date: 2018-09-03 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://www.hscripts.com/scripts/php/quiz-maker.php Software Link:https://www.hscripts.com/scripts/php/downloads/quiz-maker.zip Version: 1.0 Category:...

CVE-2018-16344

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

Directory traversal

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

CVE-2018-16344

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

CVE-2018-16344

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock...

Zomato: [www.zomato.com] SQLi - /php/██████████ - item_id

Thanks @gerbenjavado for helping us keep @zomato secure : Thanks to the entire @Zomato team for doing this challenge. Its a pleasure to be back in the bug bounty game after a while. Introduction So I managed to find SQLi on https://www.zomato.com/php/██████████ in the POST parameter itemid...

IBM Maximo Asset Management SQL Injection Vulnerability (CNVD-2018-17089)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. An SQL injectio...

Niubicms v1.8 SQL Injection Vulnerability in Frontend

Niubicms is by the Nanjing Niukun Network Technology Co., Ltd. independent research and development of the novel website source code, news website source code, for PHP open source system. Niubicms v1.8 SQL injection vulnerability exists in the foreground . Attackers can use the vulnerability to...

Sql injection

The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read...

SQL Injection Vulnerability in Topsystem's Website Building System

Wenzhou top information technology limited company, focusing on providing enterprises with website marketing planning, construction, promotion and maintenance of one-stop service. Topland technology station building system SQL injection vulnerability, attackers can use the vulnerability to obtain...

ShopsN open source online store full web system suffers from SQL injection vulnerability (CNVD-2018-17331)

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN v2.3.3 official version of the existen...

SQL Injection Vulnerability in Website Building System of Ningbo Youdao Network Technology Co.

Ningbo Youdao Network Technology Co., Ltd. is an Internet company specializing in corporate brand Internet digital communication and Internet integrated marketing. Ningbo Youdao Network Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited b...

SQL Injection Vulnerability in Azeus CMS 2.0 Backend

Central CMS 2.0 is a cms system made by Central Studio, this CMS is written in UTF-8 coding. Azeus CMS 2.0 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Zhejiang Instant E-commerce Co.

Ltd. is a website construction based on the integration of network marketing, bidding ranking, marketing hosting and other integrated e-commerce network marketing company. Ltd. building system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in nucms V1.1

nucms is a content management system based on PHP+MYSQL technology developed by Liaocheng Leadsun Network Technology Co. nucms V1.1 version of SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

ShopsN open source online store system adHandle function there are SQL injection vulnerabilities

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN 2.3.3 official version of the adHandle...

SQL injection vulnerability in PbootCMS V1.1.7 Do***.php page (CNVD-2018-17754)

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Do.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...

PbootCMS V1.1.7 SQL Injection Vulnerability in Sl***.php Page

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 SQL injection vulnerability exists in Sl.php page. An attacker can exploit the vulnerability to obtain sensitive information in the database...