SQL Injection Vulnerability in Education Industry Digitization Solutions of Beijing Kuangshi Technology Co. Ltd (CNVD-2020-04874)

Beijing Kuangxiang Technology Co., Ltd. digital solution for the education industry is a full-stack artificial intelligence solution for schools and kindergartens. A SQL injection vulnerability exists in the Education Industry Digital Solution of Beijing Kuangyi Technology Co. Ltd, which can be...

267M Facebook Users’ Phone Numbers Exposed Online

A database exposing the names, phone numbers and Facebook user IDs of millions of platform users was left unsecured on the web for nearly two weeks before it was removed. Security researcher Bob Diachenko, who along with Comparitech discovered the unsecured Elasticsearch database, believe it...

Honda Leaks Data of 26K North American Customers

An exposed database was discovered leaking the personal information of 26,000 North American Honda owners and their vehicles. The Elasticsearch database in question is owned by the American Honda Motor Co., a North American subsidiary of the Honda Motor Co. The cloud misconfiguration exposed the...

SQL Injection Vulnerability in Web Design System of Weili Taiwan Ltd.

Taiwan Weili Web Design Co., Ltd. is a customized web site based on customer needs, mainly promoting the suite of web design services, customers include food, electronics, computers, machinery and service industries, etc.. A SQL injection vulnerability exists in the website building system of Wei...

SQL injection vulnerability in Ad***.php page of website building system of Guangzhou Yongtuo Information Technology Co.

Guangzhou Yongtuo Information Technology Co., Ltd. is a national high-tech enterprise integrating e-commerce and government affairs system R&D and maintenance services, information system integration and maintenance services and industry application solutions. A SQL injection vulnerability exists...

SQL Injection Vulnerability in Key Management System

Key Management Service KMS is a security management service that allows you to easily create and manage keys, protect the confidentiality, integrity and availability of keys, meet the key management needs of users for multi-application and multi-service, and comply with regulatory and compliance...

SQL Injection Vulnerability in Pushcoupon CMS Frontend

Push Couponer CMS is a completely free Taobao coupon website source code program that automatically collects products with coupons and automatically applies for high commission programs. Push Couponer CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain sensiti...

74cms 4.2.26 SQL Injection Vulnerability in Frontend Aj***.php Page

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms 4.2.26 SQL injection vulnerability exists in the frontend Aj.php page. An attacker can exploit the vulnerability to obtain sensitive information from the...

SQL injection vulnerability in the co***.asp page of the Fushun Jingwei Network website builder system

Fushun Jingwei Network Technology Development Co., Ltd. was founded in 2002, the scope of services covering website construction and promotion, domain name registration, web hosting, graphic and animation design, software development, network and system integration engineering, digital video,...

SQL Injection Vulnerability in in***.asp Page of Fushun Jingwei Website Building System

Fushun Jingwei Network Technology Development Co., Ltd. was founded in 2002, the scope of services covering website construction and promotion, domain name registration, web hosting, graphic and animation design, software development, network and system integration engineering, digital video,...

SQL Injection Vulnerability in Ouyer Information Limited's Website Building System

Ouye Building System is a content management system template developed by Ouye Information Limited Building Station. Ouye Information Limited website system has a SQL injection, attackers can use this vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Website Building System of Wisdom Sky Advertising Co.

Wisdom Tiancheng Advertising Co., Ltd. is a professional organization in brand planning, brand image design and product packaging design. There is a SQL injection vulnerability in the website building system of Wisdom Tiansheng Advertising Co. Ltd, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in u*** Parameters on zzzphp sa***.php Page

zzphp is a PHP and MYSQL based CMS, free open source building system. zzzphp sa.php page u parameters exist SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

Web Security Dog (Apache Edition) V4.0 suffers from sql injection bypass vulnerability

Website Security Dog is a server tool that integrates website content security protection, website resource protection and website traffic protection functions. Functions covered by the net horse / Trojan scanning, anti-SQL injection, anti-stolen links, anti-CC attacks, real-time website traffic...

ZZZphp sa***.php page ti*** parameter has SQL injection vulnerability

ZZZphp is a PHP and MYSQL based on free open source website building system . ZZZphp sa.php page ti parameters exist SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in LJCMS of Beijing Liang Jing Zhi Cheng Technology Co.

LiangJing Content Management System LJCMS , known for its many templates , easy to optimize , open source , is the newest PHP open source website management system . Beijing LiangJing Zhicheng Technology Co., Ltd LJCMS suffers from a SQL injection vulnerability, which can be exploited by attacker...

SQL Injection Vulnerability in ZhiCms

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Ridewind Multi-User PHP Statistics System

Ride the Wind Multi-User PHP Statistics System is a website traffic statistics system for web store statistics. Ridewind Multi-User PHP Statistics System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Pinnacle Online Marking System (CNVD-2020-01617)

Pinke online marking system is the objective questions automatically identified, subjective questions by the teacher in front of the computer marking, and ultimately by the computer will be subjective and objective questions results summarized to generate the school needs a set of statistical...

SQL Injection Vulnerability in SeaChange Collaboration Office System

Wuhan Haichang Information Technology Co., Ltd. is a high-tech enterprise engaged in the research, development and sales of office automation software, collaboration management software and e-government software. An SQL injection vulnerability exists in the SeaChange Collaboration Office system,...