SQL Injection Vulnerability in Shue Wei Information Digital Campus Unified Authentication Platform

Shuewei Digital Campus Unified Authentication Platform serves as the authorization and access control center for network applications, realizing security management from users to applications. It provides unified user management, authentication service and authority management for all application...

SQL Injection Vulnerability in OneSevenEight Advertising Media Website Construction System

178 Advertising Media is a company dedicated to providing digital marketing and new media planning, promotion and operation services for Chinese enterprises. A SQL injection vulnerability exists in the website construction system of 178 Advertising Media, which can be exploited by attackers to...

TinyShop V3.0 E-commerce System suffers from SQL Injection Vulnerability

TinyShop is an e-commerce system online store system based on the Tiny framework, suitable for businesses and individuals to quickly build a personalized online store. TinyShop V3.0 e-commerce system suffers from a SQL injection vulnerability due to the system failing to effectively filter...

SQL Injection Vulnerability in Unitech's Business Intelligence Management System

Shenyang Uno Technology Co., Ltd. specializes in small and medium-sized enterprise intellectual property system construction and maintenance, brand marketing planning, brand promotion and marketing and other fields. There is a SQL injection vulnerability in Unitech's Knowledge Management System,...

SQL Injection Vulnerability in CoolSource Content Management System

CoolSource CMS Content Site Management System is a website management system based on Microsoft's latest ASP.NET platform. A SQL injection vulnerability exists in the CoolSource CMS due to the system failing to effectively filter user input. An attacker can exploit this vulnerability to obtain...

ShopsN 2.2.1 SQL Injection Vulnerability in frontend restore_order method

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd, an open source online store in line with enterprise-class commercial standards of the whole network system. ShopsN 2.2.1 official version of the foreground restoreorder method SQL injection...

SQL Injection Vulnerability in IBOS Enterprise Collaboration Management Software DefaultController.php Page

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the DefaultController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the vulnerability to obtain...

SQL injection vulnerability in Ocean CMS \admin\admin_ajax.php page

Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS \admin\adminajax.php page SQL injection vulnerability. The vulnerability is due to the system failing to effectively filter the data submitted by the user. An attack...

SQL Injection Vulnerability in ShopsN v2.0 Frontend OrderGroupController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end OrderGroupController.class.php file SQL injection vulnerability. The vulnerability is due to the system failing to effectively filter user-submitted data. An attacker can exploit this vulnerability to...

SQL Injection Vulnerability in BageCms Content Management System

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system suffers from a SQL injection vulnerability, the vulnerability is due to the system fails to effectively filter the catalog parameters. An attacker can exploi...

SQL injection vulnerability in article_detal.php page of Xiamen Eltong Network Technology Co.

Eltron website builder is a website builder system. A SQL injection vulnerability exists in the articledetal.php page of the website builder system of Xiamen Eltong Network Technology Co. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in UCMS

UCMS is a simple open source content management system . UCMS version 1.4.3 SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive database information...

Redfan iOffice Office Software ioCtlSet.asmx suffers from SQL injection vulnerability

Redfan iOffice.net is a professional mobile OA office automation solution provider, providing mobile OA office automation system for medical, government, enterprise and military units. Red Sail iOffice.net OA Office software ioCtlSet.asmx there is a SQL injection vulnerability, the attacker can u...

SQL Injection Vulnerability in Flash cms /zj/html.asp Page

Flash Flash cms is Zibo Flash Network Technology Co., Ltd. developed a corporate website system. A SQL injection vulnerability exists in the Flash cms /zj/html.asp page. The vulnerability stems from the program's failure to effectively filter user-submitted data. An attacker can exploit the...

ThinkPHP 5.0.10 framework filterExp function has SQL injection vulnerability

ThinkPHP is developed and maintained by the Shanghai Top Thinking company MVC structure of the open-source PHP framework. A SQL injection vulnerability exists in the filterExp function of ThinkPHP 5.0.10 framework. A remote attacker can exploit the vulnerability to obtain sensitive database...

IBOS Enterprise Collaboration Management Software DiaryController.php page actionIndex function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionIndex function on the DiaryController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the...

SQL injection vulnerability in after_str parameter on JYmusic SongsController.class.php page

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the afterstr parameter on the JYmusic SongsController.class.php page. A remote attacker can exploit the vulnerability to obtain sensitive database information...

Gxlcms Audiobook System v1.0 SQL Injection Vulnerability in Frontend getrecomm Function

Gxlcms audiobook system is a simple to use, provide listening to the network resource station to provide free collection nodes. A SQL injection vulnerability exists in the frontend getrecomm function in Gxlcms Audiobook System v1.0 bulid 20170714, due to the system failing to strictly filter...

YxtCMF v3.1.0 SQL Injection Vulnerability in 'ty_id' Parameter

YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. YxtCMF v3.1.0 SQL injection vulnerability exists in the 'tyid' parameter. An attacker can exploit this vulnerability to obtain sensitive information from the databas...

SQL Injection Vulnerability in Internet Security Management System of Qingdao Hengxin Technology Development Co.

Qingdao Hengxin Technology Development Co., Ltd. is positioned as a high-tech enterprise specializing in the research and development of computer network and information security technology products. Qingdao Hengxin Technology Development Co., Ltd. Internet security management system SQL injectio...