CVE-2021-24200

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=getwdtable&tableid=1, on the 'length' HTTP POST parameter...

Station master CMS backstage exists universal password login vulnerability

Station Helpers CMS is committed to creating a full-featured CMS open source system. Station Helpers CMS backend exists universal password login vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Shenyang Zhihong Website Building System

Shenyang Zhihong Business Advertising Co., Ltd. is to metal materials information services as a starting point, after more than 10 years of development to form a metal, website, personnel training and other professional areas to provide supply and demand, advertising and a combination of...

SQL Injection Vulnerability in Teleconferencing System of Beijing Dexit Technology Co.

The conference call system is an integrated EasyMeeting Web to realize the integration of teleconferencing and web conferencing, and will be integrated with Microsoft, IBM and other industry mainstream office applications. There is a SQL injection vulnerability in Beijing Dexit Teleconference...

Wordpress Blog2Social SQL Injection Vulnerability

Wordpress Blog2Social is an application plugin for Wordpress. Provides an automatic posting and updating feature. A SQL injection vulnerability exists in WordPress Blog2Social plugin versions prior to 6.3.1, which stems from the fact that unauthenticated input can lead to SQL injection in the...

SQL Injection Vulnerability in Website Building System of Foshan Sanliu Network Technology Co.

Foshan Sanliu Network Technology Co., Ltd. is an advertising technology service provider specializing in network promotion. There is a SQL injection vulnerability in the website system of Foshan Sanliu Network Technology Co. An attacker can exploit the vulnerability to obtain sensitive informatio...

SQL Injection Vulnerability in Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. There is a SQL injection vulnerability in the Home Decoration ERP Management System of Shanghai Decoration Alliance Information Technology Co., Ltd, which can be exploited by attackers ...

CVE-2021-26685

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

CVE-2020-36002

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

SQL Injection Vulnerability in UFIDA U8-OA se***.jsp

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA se.jsp, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2021-22851

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter document management page to obtain database schema and data...

SQL injection vulnerability in oasys (OA automated office system) (CNVD-2021-08423)

oasys OA automated office system is oriented to the daily operation and management of the organization, employees and managers use the application system to improve the efficiency of the company's office. A SQL injection vulnerability exists in oasys OA automated office system. An attacker can...

CVE-2021-23837

An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selectedfolder HTTP request body parameter for the acp interface. The affected parameter which retrieves the file contents of the specified folder was found to be accepting malicious...

USN-4693-1 ampache vulnerabilities

It was discovered that an SQL injection vulnerability exists in the Ampache search engine. Any user able to perform searches could dump any data contained in the database. An attacker could use this to disclose sensitive information. CVE-2019-12385 It was discovered that an XSS vulnerability in...

SQL Injection Vulnerability in YouYi cms yy***_dd***.php File

Youyi cms is a movie and TV station building system. A SQL injection vulnerability exists in the YouYi cms yydd.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Miku CMS re***.php Page

Miku CMS Movie and TV Management System is a video playback cms in China. A SQL injection vulnerability exists in the re.php page of Miku CMS, which can be exploited by attackers to obtain sensitive information from the database...

SAP Netweaver AS JAVA Information Disclosure Vulnerability (CNVD-2021-03706)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP Netweaver AS JAVA Key Storage Service versions 7.10, 7.11,...

SQL Injection Vulnerability in the Website Building System of Shanghai Dicky Collar Information Technology Co.

Ltd. is a new technology company based on independent innovation, to provide enterprises with the most valuable Internet products and services. A SQL injection vulnerability exists in the website building system of Shanghai BeltLeader, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System of China Telecom Group Corporation Ltd.

Founded in September 2000, China Telecom Group Corporation China Telecom is a large state-owned telecommunications company and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the Telecom Gateway Configuration Management System of China Telecom Group Corporatio...

SQL Injection Vulnerabilities in the Websites of Several Subsidiaries of Shenzhen Luxon Inspection Co.

Shenzhen Lixin Testing Co., Ltd. was established on April 21, 2004. The company's business scope includes: testing and analysis of consumer goods and industrial products; testing and analysis of electromagnetic compatibility and safety of electrical and electronic products and electric toys;...