SQL Injection Vulnerability in Wando Networks Website Building System

Beijing Wando Network Technology Co., Ltd. is a provider of collaborative management software products and services. There is a SQL injection vulnerability in the Wando Network website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in hdcmsv1.2 System

HDCMS is a content management system package written in PHP , the database using Mysql. to provide powerful , complete functionality to complete the rapid development of the site . HDCMS system version 1.2 SQL injection vulnerability, remote attackers can exploit the vulnerability to obtain...

Cloud EC E-commerce System v1.2 System SQL Injection Vulnerability

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of open source e-commerce system software based on PHP + MYSQL independently developed by Yunmai E-commerce Co. Cloud EC e-commerce system version 1.2 SQL injection vulnerability, remote attackers can exploit the vulnerabilit...

MiTop website building system multiple versions exist SQL injection vulnerabilities

Mito building system is a commercial open source building system, using PHP + MYSQL architecture. There is a SQL injection vulnerability in the MiTo website builder system. The vulnerability stems from the program parameters are not effectively filtered , attackers can use the vulnerability to...

SQL Injection Vulnerability in Qingdao Zhicheng Network Technology Co.

Qingdao Zhicheng Network Technology Co., Ltd. is a professional e-commerce service provider integrating creativity, planning, design and production. The company is mainly engaged in website construction, website production, website design, website optimization, website promotion services, website...

Cloud EC E-commerce system v1.2 suffers from SQL injection vulnerability (CNVD-2018-12322)

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system v1.2 exists SQL injection vulnerability. An attacker can exploit the vulnerability t...

SQL Injection Vulnerability in Website Construction System of Guangzhou Sanjin Network Technology Co.(CNVD-2018-12328)

Guangzhou Sanjin Network Technology Co., Ltd. is a one-stop provider of Internet application services, providing e-commerce solutions for Chinese enterprises. SQL injection vulnerability exists in the website construction system of Guangzhou Sanjin Network Technology Co. An attacker can use the...

Cscms v3.53.5 SQL Injection Vulnerability in Frontend

Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. Cscms v3.53.5 has a SQL injection vulnerability in the frontend. An attacker can exploit the vulnerability to obtain sensitive information from the database...

CVE-2018-9102

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 21.84.5535.0 and earlier, and Mitel ST 14.2, versions GA27 19.49.5200.0 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for...

SQL injection vulnerability in admin.class.php page of UQCMS Cloud B2B2C multi-store system

UQCMS cloud business system is a program using PHP + MYSQL, template using smarty template B2B2C e-commerce software. UQCMS cloud business B2B2C multi-store system admin.class.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Website Construction System of Binzhou Lingzhi Network Engineering Co.

Binzhou Lingzhi Network Engineering Co., Ltd. is a set of development, involving, sales, service as one, specializing in providing network information technology services for enterprises and institutions. Binzhou Lingzhi Network Engineering Co., Ltd. website construction system there are SQL...

SQL Injection Vulnerability in Website Construction System of Hebei Prime Network Technology Co.

Hebei Prime Network Technology Co., Ltd formerly Xingtai Dingxin Software Development Co., Ltd. is a team of companies with website construction and network promotion as a whole. A SQL injection vulnerability exists in the website construction system of Hebei Kinte Network Technology Co. An...

Cybozu Garoon Operation Limit Bypass Vulnerability (CNVD-2018-08812)

Cybozu Garoon is an office software with Chinese, Japanese, and English languages. An operation restriction bypass vulnerability exists in the login authentication settings in Cybozu Garoon 3.0.0 through 4.2.6. The vulnerability can be exploited by users logging in to the product with...

CVE-2018-9852

In Gxlcms QY v1.0.0713, Lib\Lib\Action\Home\HitsAction.class.php allows remote attackers to read data from a database by embedding a FROM clause in a query string within a Home-Hits request, as demonstrated hy sid=user,password%20from%20mysql.user%23...

CVE-2018-9852

In Gxlcms QY v1.0.0713, the vulnerable component is Lib\Lib\Action\Home\HitsAction.class.php. The issue allows remote attackers to read data from the database by injecting a FROM clause into the query string of a Home-Hits request (e.g., sid=user,password%20from%20mysql.user%23). This appears as ...

CwCms v1.8_asp Exists SQL Injection Vulnerability

CwCMS is a customized ASP+Access/MsSql content management system specifically designed for corporate websites. CwCms v1.8asp suffers from a SQL injection vulnerability. The vulnerability stems from the program does not strictly filter parameters. An attacker can exploit this vulnerability to obta...

SQL Injection Vulnerability in 08cms

08CMS Automotive Portal System is a solution for automotive portals, based on PHP+MYSQL development, super static page deployment, template and program separation, scalable architecture, open-type code, unlimited support for deep secondary development. SQL injection vulnerability exists in 08cms...

SQL injection vulnerability in Monxin Forms System \program\talk\show\set_group.php page

Monxin Forms System is an open source program that runs on PHP+MySQL. A SQL injection vulnerability exists in the \program\talk\show\setgroup.php page of Monxin Forms System. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in the Website Building System of Tai'an Star Network Technology Co.

Tai'an Star Networks Co., Ltd. is a website construction, website promotion, Internet marketing, 400 free phone calls and other businesses, with Internet technology as the core of the high-tech enterprises. Taian Star Network Technology Co., Ltd. station building system there are SQL injection...

SQL Injection and Cross-Site Scripting Vulnerabilities in Esmay's Non-Book Resource Management System

Esmay Non-Book Resource Management System can help librarians conveniently manage accompanying books, accompanying CD-ROMs and other non-paper resources, and help patrons directly search, browse online, operate online, partially download, and fully download the CD-ROMs they need. There are SQL...