SQL Injection Vulnerability in SemCMS SE***_Ba***.php File

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can run in window or linux system. SemCMS SEBa.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in SemCMS SE***_In***.php File

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEIn.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in uqcms cloud commerce system (CNVD-2020-18781)

uqcms is a lightweight shopping software, light application, light deployment, multiple clients with different presentations.PHP+MySql easy to build, Smarty template tags, two open more convenient. Can be used for free for business. SQL injection vulnerability exists in uqcms cloud commerce syste...

SQL Injection Vulnerability in UQCMS B2B2C E-commerce System

UQCMS is a lightweight shopping software, light application, light deployment, multiple clients with different presentations.PHP+MySql easy to build, Smarty template tags, two open more convenient. Can be used for free for business. UQCMS B2B2C e-commerce system suffers from a SQL injection...

SQL Injection Vulnerability in Jinan Dotchuang Network Technology Co.

Ltd. is committed to providing governments, enterprises, and network providers with high-tech network application solutions, small and medium-sized office software development and customization, system platform development and its value-added services. There is a SQL injection vulnerability in...

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10174)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10168)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10171)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Guangzhou Benying Computer Technology Co.

Guangzhou Benying Computer Technology Co., Ltd. is committed to building the Internet + business ecology, especially focusing on the field of mobile Internet, to provide APP development, system development, small program and WeChat public number secondary development, website construction and oth...

SQL Injection Vulnerability in CmsEasy

CmsEasy is a web content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in the Website Building System of Beijing Bolehoo Technology Co.

Beijing Bolehoo Technology Co., Ltd. is a website building company that integrates planning, design, production and technology development. The company is mainly engaged in: UI interface design, program development, H5 interactive design, mobile station development, WeChat secondary development,...

SQL Injection Vulnerability in Hunan Zhonghu Network Technology Co.

Hunan Zhonghu Network Technology Co., Ltd. has been committed to the Internet marketing services of professional enterprises. Hunan Zhonghu Network Technology Co., Ltd. website building system has a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information i...

SQL Injection Vulnerability in Website Building System of Guangzhou HYU Network Technology Co.

Founded in 2007, Guangzhou Hopeful Network Technology Co., Ltd. is a comprehensive enterprise specializing in providing customers with a series of enterprise services such as website, mailbox, advertisement, software, finance and tax. There is a SQL injection vulnerability in the website builder...

IoT Company Wyze Leaks Emails, Device Data of 2.4M

An exposed Elasticsearch database, owned by Internet of Things IoT company Wyze, was discovered leaking connected device information and emails of millions of customers. Wyze makes smart home cameras and connected devices like connected bulbs and plugs, which can be integrated with smart home...

SQL Injection Vulnerability in Background Login of Duan Yun Chemical Website System V2.01 System

Duanyun chemical website system is a professional chemical website construction system, which supports full static website processing, big data chemical products batch import, professional version provides structured search and other services. Duanyun chemical website system V2.01 system backgrou...

SQL Injection Vulnerability in Shanghai Yihao Information Technology Co.

Shanghai Yihao Information Technology Co., Ltd. is mainly engaged in the field of computer information technology, technology development, technology consulting and other businesses. Shanghai Yihao Information Technology Co., Ltd. website building system has a SQL injection vulnerability, which c...

SQL Injection Vulnerability in Education Industry Digitization Solution of Beijing Kuangyi Technology Co.

Beijing Kuangxiang Technology Co., Ltd. digital solution for the education industry is a full-stack artificial intelligence solution for schools and kindergartens. A SQL injection vulnerability exists in the Education Industry Digital Solution of Beijing Kuangyi Technology Co. Ltd, which can be...

SQL Injection Vulnerability in Education Industry Digitization Solutions of Beijing Kuangshi Technology Co. Ltd (CNVD-2020-04874)

Beijing Kuangxiang Technology Co., Ltd. digital solution for the education industry is a full-stack artificial intelligence solution for schools and kindergartens. A SQL injection vulnerability exists in the Education Industry Digital Solution of Beijing Kuangyi Technology Co. Ltd, which can be...

267M Facebook Users’ Phone Numbers Exposed Online

A database exposing the names, phone numbers and Facebook user IDs of millions of platform users was left unsecured on the web for nearly two weeks before it was removed. Security researcher Bob Diachenko, who along with Comparitech discovered the unsecured Elasticsearch database, believe it...

Honda Leaks Data of 26K North American Customers

An exposed database was discovered leaking the personal information of 26,000 North American Honda owners and their vehicles. The Elasticsearch database in question is owned by the American Honda Motor Co., a North American subsidiary of the Honda Motor Co. The cloud misconfiguration exposed the...