1274 matches found
Cxuucms SQL注入漏洞
Cxuucms is a PHP-based content relationship building system. cxuucms v3 suffers from a SQL injection vulnerability that originates from leaking all database data via search.php via the keyword parameter. No detailed vulnerability details are available at this time...
PT-2020-16922
Name of the Vulnerable Software and Affected Versions cxuucms version 3 Description The issue is related to a SQL injection vulnerability. This vulnerability can lead to the leakage of all database data via the keywords parameter in the "search.php" endpoint. Recommendations For cxuucms version 3...
SQL Injection Vulnerability in the Customer Platform of Shanxi Shanda Xinwang Technology Co.
Shanxi Shanda New Network Technology Co., Ltd. is a high-tech company specializing in the development of industry application software products, software services, the company has long been committed to providing enterprise management software with independent intellectual property rights,...
SQL Injection Vulnerability in the Standard Version of RAS Remote Rapid Application Access Solution of Shenzhen Techmart Communication Technology Co.
Shenzhen Techmart Communication Technology Co., Ltd. is a high-tech enterprise in the field of intelligent IOT. Techmart Communication integrates IOT technology research, intelligent product development and IOT platform service, and is an enterprise with great innovative potential. SQL injection...
SQL Injection Vulnerability in VUMC Cloud of Shanghai VUMC Software Co. Ltd (CNVD-2020-67629)
Ltd. is a foreign trade SaaS service provider, but also a professional foreign trade industry solutions provider. Ltd. SQL injection vulnerability exists in VUMA Cloud. An attacker can exploit the vulnerability to obtain sensitive information from the database...
SQL injection vulnerability in Shield Spirit Commodity Promotion System front-end ad***_up***.php page
Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...
SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend ba***.php Page
Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...
SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend ko***.php Page
Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...
SQL Injection Vulnerability in the ne***.php file of Anjoye Real Estate System
Anleye is a domestic real estate website construction brand, the program is made of highly efficient PHP5+MYSQL architecture. A SQL injection vulnerability exists in the ne.php file of Anleye Real Estate System. An attacker can exploit the vulnerability to obtain sensitive information from the...
CVE-2020-24441
Adobe Acrobat Reader for Android version 20.6.2 and earlier does not properly restrict access to directories created by the application. This could result in disclosure of sensitive information stored in databases used by the application. Exploitation requires a victim to download and run a...
Victor CMS suffers from SQL injection vulnerability (CNVD-2020-67387)
Victor CMS is a simple content management system. Victor CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...
SQL injection vulnerability in website building system of Shantou Sanhut Technology Co. Ltd (CNVD-2020-67356)
Ltd. mainly does PC website, mobile website, WeChat public number, small program kind of line, built-in super marketing and promotion tools. By Shantou Sihu Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited by attackers to obtain sensiti...
SQL Injection Vulnerability in GRM System of Pengwei Software Co.
Pengwei Software Co., Ltd. is a CRM software service provider, founded in 2005, specializing in CRM software products. A SQL injection vulnerability exists in the GRM system of Pengwei Software Corporation, which can be exploited by attackers to obtain sensitive information from the database...
Victor CMS suffers from SQL injection vulnerability
Victor CMS is a simple content management system. Victor CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in Embedded High Definition Recording and Playback System of Guangzhou Haisheng Computer Technology Co.
Embedded high-definition recording and broadcasting system adopts high-performance SOC processor, which can realize 1080P encoding display up to 60 frames per second, support POC power supply function, a standard SDI cable can realize video transmission, power supply and PTZ control and other...
SQL Injection Vulnerability in Hangzhou New Windows Information Technology Co.
Hangzhou New Window Information Technology Co., Ltd. is a national high-tech enterprise with intelligent property as its core business. There is a SQL injection vulnerability in the website building system of Hangzhou New Windows Information Technology Co. An attacker can exploit the vulnerabilit...
SQL Injection Vulnerability in Ruijie IT Integrated Business Management Platform
Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A SQL injection vulnerability exists in Ruijie IT integrated business management platform. ...
SQL injection vulnerability in ad***.cl***.php file in the backend of MTCEO repository system
MTCEO library system using php + mysql, built by thinkphp underlying , Baidu library template style for the basic style . MTCEO library system background ad.cl.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain database sensitive information...
SQL Injection Vulnerability in Shield Spirit Voting Sucking System
Shield Spirit Voting Powder Sucking System can be applied to the public number, through the WeChat public number of the message interface to collect the user to send the vote number of the data to reach the vote, with anti-brush voting voting function, but also efficiently suck the live powder...
