SQL injection vulnerability in UQCMS aj***.php page (CNVD-2019-43616)

UQCMS cloud business system is a B2B2C e-commerce software that the program uses PHP+MYSQL and the template uses smarty template. A SQL injection vulnerability exists in the UQCMS aj.php page, which can be exploited by attackers to obtain sensitive information from the database...

Xi'an Bailian Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Xi'an BaiLian Network Technology Co., Ltd. is a domestic technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be...

SQL injection vulnerability in s***h.php page of Shenzhen Tiandixin Network Technology Co.

Tiandixin network was founded in 2010, is a strategic research and development-oriented enterprises, many large-scale project experience, more than tens of thousands of Chinese enterprises common choice of website platform builder, the company mainly focuses on corporate website construction, Bai...

S-CMS php version hospital website building system v1.0 backend aj***.php S**_sh*** parameter has SQL injection vulnerability

S-CMS Hospital Station Building System with applet is developed with php+mysql, which is easy and convenient to operate. S-CMS php version of the hospital building system v1.0 background aj.php Ssh parameter SQL injection vulnerability, attackers are able to exploit the vulnerability to obtain...

Limesurvey Database Information Disclosure Vulnerability

limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. A database information disclosure vulnerability exists in versions prior to Limesurvey 3.17.14. An attacker can exploit this vulnerabilit...

SQL Injection Vulnerability in PHPMyWind g****_s***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind gs.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

Rapid7 MailCleaner Information Disclosure Vulnerability

Rapid7 MailCleaner is a set of penetration testing frameworks from the U.S. company Rapid7. The framework supports vulnerability validation and security assessment and so on. Rapid7 MailCleaner c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 Previous versions of NewslettersController.php file...

SQL Injection Vulnerability in Website Building System v2.0 of Henan Lishuo Internet Information Technology Co.

Henan Lishuo Internet Information Technology Co., Ltd. is a well-known comprehensive Internet service organization, providing network solutions for enterprises. Henan LISO Internet Information Technology Co., Ltd. website builder system v2.0 SQL injection vulnerability, attackers can use the...

Positive Teaching Management Information System web service management subsystem suffers from SQL injection vulnerability

Ortho mainly operates the entire business of universities and colleges such as basic platform, teaching management and service, student management and service, e-school affairs and digital resources. SQL injection vulnerability exists in the web service management subsystem of Zhengfang's teachin...

CVE-2018-14887

Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request...

CVE-2018-14887

Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request...

CVE-2018-14887

Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request...

Zikula Core CMS 2.0.13 Database Disclosure

Exploit Title : Zikula Core CMS 2.0.13 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/04/2019 Vendor Homepage : ziku.la Software Download Link : github.com/zikula/core/releases/download/2.0.13/2.0.zip Software Information Link :...

ChurchCRM Software 3.3.2 Database Disclosure

Exploit Title : ChurchCRM Software 3.3.2 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/04/2019 Vendor Homepage : churchcrm.io Software Download Link : github.com/ChurchCRM/CRM/releases/download/3.3.2/ChurchCRM-3.3.2.zip Software...

Gibbonedu The Flexible School Platform 17.0.00 Database Disclosure

Exploit Title : Gibbonedu The Flexible School Platform 17.0.00 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/04/2019 Vendor Homepage : gibbonedu.org Software Download Link : gibbonedu.org/download/...

OrangeScrum Project Management Software 1.6.1 Database Disclosure

Exploit Title : OrangeScrum Project Management Software 1.6.1 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/04/2019 Vendor Homepage : orangescrum.com Software Download Link : orangescrum.org/free-download...

Opus Online Placement University System 4.2.0 Database Disclosure

Exploit Title : Opus Online Placement University System 4.2.0 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/04/2019 Vendor Homepage : foss.ulster.ac.uk Software Download Link : foss.ulster.ac.uk/redmine/projects/opus/files...

JobSkee Open Source JobBoard 1.1.3 Database Disclosure

Exploit Title : JobSkee Open Source JobBoard 1.1.3 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/04/2019 Vendor Homepage : jobskee.com Software Download Link : jobskee.com/download.php Software Information Link :...

YiiCMS JetBrains PHPStorm 6.0.3 Database Disclosure

Exploit Title : YiiCMS JetBrains PHPStorm 6.0.3 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 10/04/2019 Vendor Homepage : jetbrains.com - yiiframework.com Software Download Link : github.com/johannesMatevosyan/yii-cms/archive/master.zip...

Themosis Framework BookStore 1.3.0 Database Disclosure

Exploit Title : Themosis Framework BookStore 1.3.0 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 10/04/2019 Vendor Homepage : framework.themosis.com Software Download Link : github.com/themosis/bookstore/archive/master.zip Software...