Duomicms x3.0_UTF8_Official version of the front-end SQL injection vulnerability

DuomiCms is a video-on-demand system designed for movie and TV station owners. Duomicms x3.0UTF8official version of the front end of the vi.php file there is a SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in UsualToolCMS pa***.php File

UsualToolCMS is an enterprise-level web content management system written in PHP+MYSQL that uses template separation technology to support the creation of multiple types of sites. A SQL injection vulnerability exists in the UsualToolCMS pa.php file. An attacker can exploit the vulnerability to...

SQL injection vulnerability in ShopsN open source online store full web system (CNVD-2018-22117)

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN open source online store system has a...

S-CMS Government Website Building System SQL Injection Vulnerability in Frontend

S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions for station building products. There is a SQL injection vulnerability in the frontend of the S-CMS government website builder system. Attackers can use the...

SQL Injection Vulnerability in ShopsN v2.3.5 Official Version

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN v2.3.5 official version of the existen...

Hefei Chun Chen Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Ltd. is an emerging network company that provides website construction and website optimization. Hefei Chinchen Network Technology Co., Ltd. website building system has a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in FangfaCMS of Sichuan Method Digital Technology Co.

Sichuan Method Digital Technology Co., Ltd. provides a series of e-commerce solutions from website construction, online marketing to e-commerce. SQL injection vulnerability exists in FangfaCMS of Sichuan Method Digital Technology Co. An attacker can exploit the vulnerability to obtain sensitive...

Design/Logic Flaw

The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=comjoomanager&controller=details&task=download&path=configuration.php request...

CVE-2017-18345

The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=comjoomanager&controller=details&task=download&path=configuration.php request...

Arbitrary File Download Vulnerability in niubicms

niubicms is by the Nanjing Niukun Network Technology Co., Ltd. independent research and development of the novel website source code, news website source code, for PHP open source system. niubicms arbitrary file download vulnerability. The vulnerability is due to the program on the file name...

SQL Injection Vulnerability in LaySNS

LaySNS is a lightweight, ThinkPHP+Layui-based integrated website management system that integrates content management and community interaction. LaySNS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Integrated Coal Mine Remote Monitoring Management System of Sichuan Institute of Safety Science and Technology

Sichuan Coal Mine Remote Integrated Monitoring System is a comprehensive monitoring and management system that can realize remote real-time monitoring of various sensing data in coal mines through the Internet and summarize, analyze and alarm them in time. It monitors the ventilation and gas...

CVE-2018-2447

SAP BusinessObjects Business Intelligence Launchpad Web Intelligence, version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database...

SQL Injection Vulnerability in the Website Building System of Beijing Bolehoo Technology Co.

Ltd. is a well-established website construction company integrating planning, design, production and technology development. A SQL injection vulnerability exists in the website builder system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to obtain sensitive informati...

ShopsN website builder system suffers from SQL injection vulnerability

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co. A full-featured full-featured in line with enterprise-class commercial standards really allows free commercial use of the open source online store full network system. ShopsN website builder system has ...

SQL Injection Vulnerability in Website Building System of Shangyu Tiansheng Network Technology Service Co.

Shangyu Tiansheng Network Technology Service Co., Ltd. is engaged in website construction, website promotion, website SEO optimization, enterprise mailbox, domain name registration, web space, network marketing planning for a full range of solutions. Shangyu Tiansheng Network Technology Service...

SQL Injection Vulnerability in Frontend of IM-Learning Intelligent Learning Management System of Guangyi East

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. A SQL injection vulnerability exists in the frontend of the IM-Learning Intelligent Learning Management System in Guangyi East. An attacker can exploit this...

SQL injection vulnerability in QYKCMS background fe***.php page

QYKCMS QYK CMS or QYKCMS for short is a PHP+MySql based website management system. A SQL injection vulnerability exists in the QYKCMS backend fe.php page. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in the Frontend of Bureau Veritas Law Firm's Integrated Information Management Software

Bizhi law firms comprehensive information management software is Bizhi law firms for the use of the demand for a comprehensive set of specially developed management software. SQL injection vulnerability exists in the frontend of Bizlaw Firm Information Management Software. An attacker can use the...

SQL Injection Vulnerability in Frontend of Sunny eDrive Reservation Management System

Jiangsu Gangcheng Automobile Transportation Group is a provincial group mainly engaged in road transportation and related industries. A SQL injection vulnerability exists in the frontend of the Sunny eDrive reservation management system. An attacker can exploit the vulnerability to obtain sensiti...