963 matches found
McAfee Epolicy Orchestrator SQL注入漏洞
McAfee Epolicy Orchestrator McAfee Epo is a U.S. based solution for managing endpoint, network, data security, and compliance. a SQL injection vulnerability exists in versions of McAfee Enterprise ePolicy Orchestrator prior to 5.10 Update 13. The vulnerability stems from the application's lack of...
CVE-2021-25874
AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated attacker to retrieve databases information such as application passwords hashes...
CVE-2021-37807
An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /checkavailability.php endpoint that serves as a checker whether a new user's email is already exist within the database...
webTareas SQL注入漏洞
webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas 2.4 and earlier versions, where an unauthenticated user can perform time and...
CVE-2021-33688
SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained...
Metinfo MetInfo SQL注入漏洞
Metinfo MetInfo is a content management system CMS developed by China's Metinfo using PHP and Mysql. A SQL injection vulnerability exists in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0, which allows attackers to access sensitive database information...
PT-2021-11648 · Unknown · Wayang-Cms
Name of the Vulnerable Software and Affected Versions: Wayang-CMS version 1.0 Description: A SQL injection issue in the wy controlls/wy side visitor.php file allows attackers to obtain sensitive database information. Recommendations: For Wayang-CMS version 1.0, consider restricting access to the ...
SQL Injection Vulnerability in Asset Management System of Fujian Boss Software Co.
Fujian BOSS Software Co., Ltd. is the undertaking unit of "National Torch Plan Project" and "Innovation Fund Support Project" of Ministry of Science and Technology. A SQL injection vulnerability exists in the asset management system of Fujian Boss Software Co., Ltd, which can be exploited by...
SQL Injection Vulnerability in the Website Building System of Tianjin Jixiang Enterprise and Commerce Technology Co.
Tianjin Jixiang Enterprise and Business Technology Co., Ltd. is a company dedicated to providing enterprises with Baidu promotion, website construction, micro station, APP development and other Internet integrated service providers. There is a SQL injection vulnerability in the website building...
SQL Injection Vulnerability in MSVOD Video System
MSVOD Video System is a free movie watching software. MSVOD Video System suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in myeye Backend Management
Myeye is a monitoring and control system. A SQL injection vulnerability exists in the backend administration of Myeye, which can be exploited by an attacker to obtain sensitive information from the database...
CVE-2021-24200
The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=getwdtable&tableid=1, on the 'length' HTTP POST parameter...
Station master CMS backstage exists universal password login vulnerability
Station Helpers CMS is committed to creating a full-featured CMS open source system. Station Helpers CMS backend exists universal password login vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...
SQL Injection Vulnerability in Shenyang Zhihong Website Building System
Shenyang Zhihong Business Advertising Co., Ltd. is to metal materials information services as a starting point, after more than 10 years of development to form a metal, website, personnel training and other professional areas to provide supply and demand, advertising and a combination of...
SQL Injection Vulnerability in Teleconferencing System of Beijing Dexit Technology Co.
The conference call system is an integrated EasyMeeting Web to realize the integration of teleconferencing and web conferencing, and will be integrated with Microsoft, IBM and other industry mainstream office applications. There is a SQL injection vulnerability in Beijing Dexit Teleconference...
Wordpress Blog2Social SQL Injection Vulnerability
Wordpress Blog2Social is an application plugin for Wordpress. Provides an automatic posting and updating feature. A SQL injection vulnerability exists in WordPress Blog2Social plugin versions prior to 6.3.1, which stems from the fact that unauthenticated input can lead to SQL injection in the...
SQL Injection Vulnerability in Website Building System of Foshan Sanliu Network Technology Co.
Foshan Sanliu Network Technology Co., Ltd. is an advertising technology service provider specializing in network promotion. There is a SQL injection vulnerability in the website system of Foshan Sanliu Network Technology Co. An attacker can exploit the vulnerability to obtain sensitive informatio...
SQL Injection Vulnerability in Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.
Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. There is a SQL injection vulnerability in the Home Decoration ERP Management System of Shanghai Decoration Alliance Information Technology Co., Ltd, which can be exploited by attackers ...
CVE-2021-26685
A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...