B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure

Exploit Title: B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure Date: 2020-09-16 Exploit Author: LiquidWorm Vendor Homepage: https://www.b-swiss.com Version: 3.6.5 Affected version: 3.6.5,3.6.2,3.6.1,3.6.0,3.5.80,3.5.40,3.5.20,3.5.00,3.2.00,3.1.00 B-swiss 3 Digital Signage System 3.6....

B-swiss 3 Digital Signage System 3.6.5 Database Disclosure

B-swiss 3 Digital Signage System 3.6.5 Database Disclosure Vendor: B-Swiss SARL | b-tween Sarl Product web page: https://www.b-swiss.com Affected version: 3.6.5 3.6.2 3.6.1 3.6.0 3.5.80 3.5.40 3.5.20 3.5.00 3.2.00 3.1.00 Summary: Intelligent digital signage made easy. To go beyond the possibiliti...

B-swiss 3 Digital Signage System 3.6.5 Database Disclosure

Summary Intelligent digital signage made easy. To go beyond the possibilities offered, b-swiss allows you to create the communication solution for your specific needs and your graphic charter. You benefit from our experience and know-how in the realization of your digital signage project...

CVE-2020-13405

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request...

CVE-2020-13405

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request...

CVE-2020-13405

Microweber

CVE-2020-13405: MicroWeber Unauthenticated User Database Disclosure

The post CVE-2020-13405: MicroWeber Unauthenticated User Database Disclosure appeared first on Rhino Security Labs...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-44108)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-44107)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Stone Technology Online Exam System kg***_sz***.php Page

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores. A...

SQL Injection Vulnerability in 120 Emergency Command Center Web Service System (CNVD-2020-31564)

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the 120 Emergency Command Center Web Service System, which can be exploite...

SQL Injection Vulnerability in Easy B2C Mall System V1.1 version po***.php

Easy B2C mall system is a mall system based on open source framework development. Easy B2C mall system V1.1 version po.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Heybbs se***.php File

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs se.php file has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in GoWeb Web System

Goodposition Technology Co., Ltd. is a company that provides web application services to users. A SQL injection vulnerability exists in the GoWeb web system, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in ZZCMS backend zt***_se***.php file (CNVD-2020-25324)

zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ztse.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Jinwei Mobile Mall System ca***.php File

Jinwei mobile mall system is a micro-business customers with a public number, imitation hand Tao page layout, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory control, subdivided...

Xiamen SuitCloud Information Technology Co. Ltd. website security dog suffers from SQL injection bypass vulnerability (CNVD-2020-18704)

Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. Xiamen Service Cloud Information Technology Co., Ltd. website security dog SQL injection bypass vulnerability, attackers can use the vulnerability to obtain sensitiv...

CVE-2014-6038

Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability. Fixed in EventLog Analyzer 10.0 Build 10000...

ASTPP 4.0.1 Database Disclosure

Exploit Title: ASTPP 4.0.1 VoIP Billing - Database Backup Download Date: 2019-11-18 Exploit Author: Fabien AUNAY Vendor Homepage: https://www.astppbilling.org/ Software Link: https://github.com/iNextrix/ASTPP/tree/v4.0.1 Version: 4.0.1 vendor default setup script Tested on: Debian 9 - CentOS 7 CV...

PunBB 1.4.4 Database Disclosure

From https://j.ludost.net/blog/archives/2019/11/11/minorsecurityissueinpunbbwithsqlite/index.html Minor security issue in punbb with SQLite Georgi Guninski security advisory 76, 2019 Running punbb-master from https://github.com/punbb/punbb from Thu 07 Nov 2019 11:23:33 AM UTC Installing on...