YouDianCMS suffers from SQL injection vulnerability (CNVD-2020-28100)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability. Attackers can use this vulnerability to obtain...

SQL Injection Vulnerability in Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion, full network marketing, large-scale mall and platform construction, micro letter development, mobile client development, office OA and other services, by virtue of...

SQL injection vulnerability in waychar enrollment system (CNVD-2020-28129)

waychar registration system, an online registration system developed for sports events and other general events, supports public numbers and small programs. The waychar registration system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in imcat

Intimate cat imcat is a PHP + MySQL architecture and design of a general-purpose website system, simple, lightweight, practical, sharing, permanent open source free of charge. imcat SQL injection vulnerability , attackers can exploit the vulnerability to obtain sensitive database information...

Information Disclosure Vulnerability in Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. Attentive Home Attentive Cat imcat suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Backend Advertisements of Inkoo Online Education Software

Beijing IncuTimes Technology Co., Ltd "IncuTimes", founded in 2015, is a domestic educational products and technology service provider. A SQL injection vulnerability exists in the background advertisement map of Incu online education software, which can be exploited by attackers to obtain sensiti...

Heybbs 1.2 no***_de***.php file has SQL injection vulnerability

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. A SQL injection vulnerability exists in the Heybbs 1.2 node.php file, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in UILAS Library Clustered Regional Consortium Management System (CNVD-2020-31497)

UILAS library cluster regional union management system adopts C/S+B/S mode, C/S mode is mainly for libraries that have high precision requirements for editing, the editing system of C/S mode is mainly for the continuation of the editing module of ILASII and ILASIII system, and further enhancement...

SQL Injection Vulnerability in kkcms frontend re***.php file

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms front re.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive...

LJCMS suffers from SQL injection vulnerability (CNVD-2020-26976)

LJCMS is a PHP+MYSQL based, free and open source enterprise website system. LJCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in 120 Emergency Command Center Web Service System in***.php Page

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the in.php page of the 120 Emergency Command Center Web Service System,...

Xuchang Yongcheng Network Technology Co., Ltd. website building system pi*** page fl*** parameters exist SQL injection vulnerability

Xuchang Yongcheng Network Technology Co., Ltd. is a company dedicated to Internet development, micro letter application development, enterprise Internet promotion. Xuchang Yongcheng Network Technology Co., Ltd. building system pi page fl parameters exist SQL injection vulnerability, attackers can...

SQL Injection Vulnerability in Jilin Zhongnuo Technology Co.

Jilin Zhongnuo Technology Co., Ltd. is an Internet + technology and service provider. Jilin Zhongnuo Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in the New Assessment Module of 120 Emergency Command Center Web Service System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the new assessment module of the 120 Emergency Command Center Web Service...

WebCMS suffers from SQL injection vulnerability

WebCMS is a centralized cloud backup solution designed specifically for campuses. WebCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...

Shanghai Danfan Network Technology Co., Ltd. station building system ab**.php, se**.php and other pages exist SQL injection vulnerability

Shanghai Danfan network science and technology limited company builds the station system is for the chemical industry to provide the security, the high efficiency, the multi-function, the system matching B2B electronic commerce platform specialized website. Shanghai Danfan network science and...

VMware Tanzu Application Service for VMs Unauthorized Access Vulnerability

VMware Tanzu Application Service for VMs is a suite of application development and deployment solutions from VMware. A security vulnerability exists in VMware Tanzu Application Service for VMs versions 2.6.x prior to 2.6.18, 2.7.x prior to 2.7.11, and 2.8.x prior to 2.8.5. An attacker could explo...

SQL Injection Vulnerability in Laike Push E-commerce System of Hunan One Eight Network Technology Co. Ltd (CNVD-2020-25107)

Laikatsu Push e-commerce system is a platform that integrates all the functions of an e-commerce system. Hunan One Eight Network Technology Co., Ltd Laike Push e-commerce system has a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the...

SQL injection vulnerability in ZZCMS backend zt***_se***.php file (CNVD-2020-25102)

zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ZZCMS team's backend ztse.php file, which can be exploited by an attacker to obtain sensitive information from the database...

CIPPlanner CIPAce SQL Injection Vulnerability

CIPPlanner CIPAce is a suite of business process automation and application development platforms from the US-based CIPPlanner. CIPPlanner CIPAce suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive database information...