SQL Injection Vulnerability in UFIDA U8-OA se***.jsp

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA se.jsp, which can be exploited by an attacker to obtain sensitive information from the database...

SQL injection vulnerability in oasys (OA automated office system) (CNVD-2021-08423)

oasys OA automated office system is oriented to the daily operation and management of the organization, employees and managers use the application system to improve the efficiency of the company's office. A SQL injection vulnerability exists in oasys OA automated office system. An attacker can...

USN-4693-1 ampache vulnerabilities

It was discovered that an SQL injection vulnerability exists in the Ampache search engine. Any user able to perform searches could dump any data contained in the database. An attacker could use this to disclose sensitive information. CVE-2019-12385 It was discovered that an XSS vulnerability in...

SQL Injection Vulnerability in YouYi cms yy***_dd***.php File

Youyi cms is a movie and TV station building system. A SQL injection vulnerability exists in the YouYi cms yydd.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Miku CMS re***.php Page

Miku CMS Movie and TV Management System is a video playback cms in China. A SQL injection vulnerability exists in the re.php page of Miku CMS, which can be exploited by attackers to obtain sensitive information from the database...

SAP Netweaver AS JAVA Information Disclosure Vulnerability (CNVD-2021-03706)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP Netweaver AS JAVA Key Storage Service versions 7.10, 7.11,...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System of China Telecom Group Corporation Ltd.

Founded in September 2000, China Telecom Group Corporation China Telecom is a large state-owned telecommunications company and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the Telecom Gateway Configuration Management System of China Telecom Group Corporatio...

SQL Injection Vulnerabilities in the Websites of Several Subsidiaries of Shenzhen Luxon Inspection Co.

Shenzhen Lixin Testing Co., Ltd. was established on April 21, 2004. The company's business scope includes: testing and analysis of consumer goods and industrial products; testing and analysis of electromagnetic compatibility and safety of electrical and electronic products and electric toys;...

SQL Injection Vulnerability in the Website Building System of Shanghai Dicky Collar Information Technology Co.

Ltd. is a new technology company based on independent innovation, to provide enterprises with the most valuable Internet products and services. A SQL injection vulnerability exists in the website building system of Shanghai BeltLeader, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70831)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in bymall Multi-User Mall System

Bymall multi-user mall system is the Bay Cloud development of self-employment + Merchants stationed B2B2C system, but also includes WeChat e-commerce system, spike chopping distribution, marketing full coverage, small program mall system, open the new era of small program live selling goods,...

SQL Injection Vulnerability in Bo Yun CD-ROM System of Hangzhou Maida Electronics Co.

Hangzhou Maida Electronics Co., Ltd. provides professional library systems, including search, storage, access and other functions, customers involved in the domestic major universities and provincial and municipal libraries. A SQL injection vulnerability exists in Bo Yun CD-ROM system of Hangzhou...

SQL injection vulnerability in yycms yy***_us***.php file

yycms is a movie and television system. The yycms yyus.php file suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

TYPO3 安全漏洞

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in the TYPO3 viewstatistics extension prior to version 2.0.1, which originates from saving all GET and POST data requested by the TYPO3 front-end to a...

Butler ordering is prone to SQL injection vulnerability

Butler's Order Easy, a collection of PC Mall + WeChat Mall + WeChat Small Program + APP Mall + h5 Mall four-in-one online ordering mall system, seamlessly connecting to Butler's software, to achieve seamless connection of commodities, inventory, orders, customers, finance and other data. Butler's...

SQL Injection Vulnerability in OurPHP Co***.php File

OurPHP is a PHP+MySQL based development of W3C-compliant website building system. OurPHP Co.php file contains SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Situ CMS (CNVD-2020-68888)

Situ CMS is the short name of Situ Tourism Website Management System, which is a self-developed website management system applicable to the construction of tourism websites. A SQL injection vulnerability exists in SITO CMS. An attacker can exploit the vulnerability to obtain sensitive information...

SQL injection vulnerability in Shield Spirit Commodity Promotion System front-end ad***_de***.php page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

ZZCMS suffers from SQL injection vulnerability (CNVD-2020-66606)

ZZCMS is a content management system for Webmaster Merchants. ZZCMS 2020 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Victor CMS suffers from SQL injection vulnerability (CNVD-2020-66833)

Victor CMS is a simple content management system. Victor CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...