Changing TSA 访问控制错误漏洞

Changing TSA is a timestamp server from Panorama Changing Corporation in Taiwan, China. Changing TSA suffers from an Access Control Error vulnerability that stems from a lack of authentication, which could allow an unauthenticated, remote attacker to read, modify, and delete database contents...

CVE-2025-8861: Missing Authentication for Critical Function

TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents...

PT-2025-35180

Name of the Vulnerable Software and Affected Versions: TSA developed by Changing affected versions not specified Description: TSA developed by Changing is susceptible to a missing authentication issue. This allows unauthenticated remote attackers to read, modify, and delete database contents...

CVE-2025-8858: Improper Neutralization of Special Elements used in an SQL Command

Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

CVE-2025-9255

WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

CVE-2025-9255 Uniong｜WebITR - SQL Injection

WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

CVE-2025-9255

WebITR by Uniong is affected by a SQL injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands and read database contents. The available documents consistently describe this as a SQL injection issue in the WebITR system, without providing concrete deta...

CVE-2025-9255: Improper Neutralization of Special Elements used in an SQL Command

WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

CVE-2025-8914

Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

CVE-2025-8914 WellChoose｜Organization Portal System - SQL Injection

Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

CVE-2025-8914: Improper Neutralization of Special Elements used in an SQL Command

Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

PT-2025-30235 · Simopro Technology · Winmatrix3 Web

Name of the Vulnerable Software and Affected Versions: WinMatrix3 Web package versions affected versions not specified Description: WinMatrix3 Web package developed by Simopro Technology contains a SQL Injection flaw. This allows unauthenticated remote attackers to inject arbitrary SQL commands,...

CVE-2025-7919: Exposure of Sensitive Information to an Unauthorized Actor

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-7918: Improper Neutralization of Special Elements used in an SQL Command

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-7735

The Hospital Information System developed by UNIMAX has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

PT-2025-29900 · Unimax · Unimax Hospital Information System

Name of the Vulnerable Software and Affected Versions: UNIMAX Hospital Information System affected versions not specified Description: The Hospital Information System developed by UNIMAX is susceptible to a SQL Injection issue. This allows unauthenticated remote attackers to inject arbitrary SQL...

CVE-2025-7735: Improper Neutralization of Special Elements used in an SQL Command

The Hospital Information System developed by UNIMAX has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

UNIMAX Hospital Information System SQL注入漏洞

UNIMAX Hospital Information System is a hospital information system from UNIMAX Corporation. UNIMAX Hospital Information System suffers from a SQL injection vulnerability that stems from SQL injection and could result in reading the contents of the database...

CVE-2025-6169: Improper Neutralization of Special Elements used in an SQL Command

The WIMP website co-construction management platform from HAMASTAR Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2021-23186

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database contents of other tenants, in a multi-tenant system...