Multiple Vulnerabilities in the Program Management System of Zhengzhou Wecom Technology Co.

WKM Technology is is a broadband network multimedia application system solutions and equipment providers, system integrators and information service providers, is the Beidou timing application system solutions and equipment providers, the main business of education informatization, party members ...

SQL Injection in Osclass

High-Tech Bridge Security Research Lab discovered a high-risk SQL injection vulnerability in Osclass, a popular web-based software for building customized classifieds marketplace. The vulnerability can be exploited to gain access to potentially sensitive information in the application database an...

Cisco Videoscape Distribution Suite Service Manager Security Bypass Vulnerability

Cisco Videoscape Distribution Suite Service Manager is a suite of reporting and analysis tools for VDS products from Cisco in the United States. Cisco Videoscape Distribution Suite Service Manager fails to use RBAC control over back-end database access in real-time, allowing remote attackers to...

Ipswitch WhatsUp Gold SQL Injection Vulnerability

Ipswitch WhatsUp Gold is a unified suite of infrastructure and application monitoring software. IPswitch WhatsUp Gold suffers from a SQL injection vulnerability. Failure to properly filter the 'UniqueID' parameter allows remote attackers to exploit the vulnerability to submit specially crafted SQ...

LOCKON EC-CUBE BbAdminViewsControl Plugin SQL Injection Vulnerability

LOCKON EC-CUBE is a set of open source e-commerce website building platform. bbAdminViewsControl is one of the backend screen management plugin. LOCKON EC-CUBE BbAdminViewsControl suffers from a SQL injection vulnerability that allows remote attackers to exploit the vulnerability by submitting...

CVE-2015-6417

Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via 1 the GUI or 2 a crafted HTTP request, aka Bug ID CSCuv87025...

CVE-2015-6417

CVE-2015-6417 affects Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier. The root cause is failure to consistently enforce RBAC for the back-end database, enabling an authenticated remote user to read and write database entries via the GUI or a crafted HTTP request. T...

UFIDA Software TruboCRM Management System SQL Injection Vulnerability

TruboCRM Management System is a customer relationship management system. A SQL injection vulnerability exists in UFIDA Software TruboCRM Management System, which allows attackers to exploit the vulnerability to gain access to sensitive database information...

SQL Injection Vulnerability in Fujian Sichuang Flash Flood Monitoring and Warning System

Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A SQL injection vulnerability exists in Fujian SiChuang's flash flood monitoring and early warning system, which allows attackers to utilize commonly used SQL...

SQL Injection Vulnerability in Panmicro Collaborative Business System

Panavision Collaborative Business System is a complete enterprise collaborative work platform. A SQL injection vulnerability exists in the full version of Panmicro Collaborative Business System, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

CIS Manager SQL Injection Vulnerability

CIS Manager is a content management system. CIS Content Management System 2015-Q4 default.php fails to properly handle the TroncoID parameter, allowing remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

SQL Injection Vulnerability in Creative Yingfeng School Office OA System

Think Yingfeng School Office OA System is a comprehensive school management platform. A SQL injection vulnerability exists in versions 3.99 and earlier of the Creative Yingfeng School Office OA System. It allows attackers to exploit the vulnerability to obtain sensitive database information...

The vulnerability of the MySQL database management system allows a hacker to gain access to the database management system or execute arbitrary code.

The vulnerability of the DML sub-component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the MySQL Server or execute arbitrary code...

Techno Project Japan Enisys Gw SQL Injection Vulnerability

Techno Project Japan Enisys Gw is an open source groupware software from Techno Project Japan. A SQL injection vulnerability exists in Techno Project Japan Enisys Gw. The vulnerability allows remote attackers to submit specially crafted SQL queries or obtain database data...

CVE-2000-1199

PostgreSQL stores usernames and passwords in plaintext in 1 pgshadow and 2 pgpwd, which allows attackers with sufficient privileges to gain access to databases...

SEC Consult SA-20151022-0 :: Lime Survey Multiple Critical Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory 20151022-0 ======================================================================= title: Multiple critical vulnerabilities product: Lime Survey vulnerable version: 2.05 up to 2.06+ Build 151014 fixed version: 2.06+ Build 151016 CVE number: impact:...

Joomla SQL Injection Vulnerability (CNVD-2015-06804)

Joomla is a content management system, developed with PHP + MySQL database, running on Linux, Windows, MacOSX, Solaris and many other platforms. Joomla has been disclosed to have a SQL injection vulnerability, the comprehensive use of the vulnerability, attackers can obtain the website database...

SQL Injection Vulnerability in Guangzhou Shengqi Computer E-Government System

Shengqi is China's first professional high-tech enterprise integrating research, development and technical service of intelligent management system for state-owned assets. SQL injection vulnerability exists in Centec's e-government system. By comprehensively exploiting the vulnerability, an...

ManageEngine ServiceDesk Plus Multiple Vulnerabilities (Oct 2015)

ManageEngine ServiceDesk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Web Reference Database SQL Injection Vulnerability

Web Reference Database is a web-based multi-user interface product that provides search tools and automatic indexing for managing scientific literature. A security vulnerability in the Web Reference Database install.php script handling the 'defaultCharacterSet' parameter allows remote attackers t...