CVE-2026-33867

WWBN AVideo is an open source video platform. In versions up to and including 26.0, AVideo allows content owners to password-protect individual videos. The video password is stored in the database in plaintext — no hashing, salting, or encryption is applied. If an attacker gains read access to th...

SQL injection vulnerability in the ad***_in***.php page of the website building system of Zhangzhou City Kexiang Information Service Co.

Zhangzhou City, Fujian Xiangcheng Kexin Information Service Co., Ltd. is a technology company engaged in Internet and Intranet-based business. There is a SQL injection vulnerability in the adin.php page of the website building system of Zhangzhou City Fujian Xiang Xiangcheng Information Service...

SQL Injection Vulnerability in Website Building System of Chifeng E-top Network Limited (CNVD-2020-41335)

Chifeng ETO Network Co., Ltd. is a service company mainly engaged in website construction and website promotion. There is a SQL injection vulnerability in the website building system of Chifeng E-top Network Co., Ltd, which can be exploited by attackers to obtain sensitive information in the...

S-CMS Hospital Building System In***.php file suffers from SQL injection vulnerability

S-CMS hospital station building system is developed by asp+access/mssql, easy to operate, convenient, support PC+mobile+WeChat. There is a SQL injection vulnerability in the In.php file of S-CMS Hospital Building System. Attackers can use the vulnerability to obtain sensitive information in the...

SQL Injection Vulnerability in Website Building System of SHENYI TECHNOLOGY GROUP LIMITED

SHENYI TECHNOLOGY GROUP LIMITED is a comprehensive service-oriented enterprise pioneering website construction and network application services, mobile APP development, big data mining, cloud computing, Internet of Things, smart home, intellectual property agency, investment and financing service...

SQL Injection Vulnerability in AVCON6 System Management Platform Name Parameter at Warburg Pincus Information Technology Co.

Huaping Information Technology Co., Ltd. is committed to promoting the innovation of business models in various industries and the enhancement of people's life intelligence through the innovative "Internet +" video technology. A SQL injection vulnerability exists in the name parameter of AVCON6...