SQL Injection Vulnerability in FangfaCMS of Sichuan Method Digital Technology Co.

Sichuan Method Digital Technology Co., Ltd. provides a series of e-commerce solutions from website construction, online marketing to e-commerce. SQL injection vulnerability exists in FangfaCMS of Sichuan Method Digital Technology Co. An attacker can exploit the vulnerability to obtain sensitive...

Design/Logic Flaw

The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=comjoomanager&controller=details&task=download&path=configuration.php request...

CVE-2017-18345

The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=comjoomanager&controller=details&task=download&path=configuration.php request...

Arbitrary File Download Vulnerability in niubicms

niubicms is by the Nanjing Niukun Network Technology Co., Ltd. independent research and development of the novel website source code, news website source code, for PHP open source system. niubicms arbitrary file download vulnerability. The vulnerability is due to the program on the file name...

SQL Injection Vulnerability in LaySNS

LaySNS is a lightweight, ThinkPHP+Layui-based integrated website management system that integrates content management and community interaction. LaySNS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Integrated Coal Mine Remote Monitoring Management System of Sichuan Institute of Safety Science and Technology

Sichuan Coal Mine Remote Integrated Monitoring System is a comprehensive monitoring and management system that can realize remote real-time monitoring of various sensing data in coal mines through the Internet and summarize, analyze and alarm them in time. It monitors the ventilation and gas...

CVE-2018-2447

SAP BusinessObjects Business Intelligence Launchpad Web Intelligence, version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database...

ShopsN website builder system suffers from SQL injection vulnerability

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co. A full-featured full-featured in line with enterprise-class commercial standards really allows free commercial use of the open source online store full network system. ShopsN website builder system has ...

SQL Injection Vulnerability in the Website Building System of Beijing Bolehoo Technology Co.

Ltd. is a well-established website construction company integrating planning, design, production and technology development. A SQL injection vulnerability exists in the website builder system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to obtain sensitive informati...

SQL Injection Vulnerability in Website Building System of Shangyu Tiansheng Network Technology Service Co.

Shangyu Tiansheng Network Technology Service Co., Ltd. is engaged in website construction, website promotion, website SEO optimization, enterprise mailbox, domain name registration, web space, network marketing planning for a full range of solutions. Shangyu Tiansheng Network Technology Service...

SQL Injection Vulnerability in Frontend of IM-Learning Intelligent Learning Management System of Guangyi East

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. A SQL injection vulnerability exists in the frontend of the IM-Learning Intelligent Learning Management System in Guangyi East. An attacker can exploit this...

SQL Injection Vulnerability in Frontend of Sunny eDrive Reservation Management System

Jiangsu Gangcheng Automobile Transportation Group is a provincial group mainly engaged in road transportation and related industries. A SQL injection vulnerability exists in the frontend of the Sunny eDrive reservation management system. An attacker can exploit the vulnerability to obtain sensiti...

SQL injection vulnerability in QYKCMS background fe***.php page

QYKCMS QYK CMS or QYKCMS for short is a PHP+MySql based website management system. A SQL injection vulnerability exists in the QYKCMS backend fe.php page. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in the Frontend of Bureau Veritas Law Firm's Integrated Information Management Software

Bizhi law firms comprehensive information management software is Bizhi law firms for the use of the demand for a comprehensive set of specially developed management software. SQL injection vulnerability exists in the frontend of Bizlaw Firm Information Management Software. An attacker can use the...

SQL Injection Vulnerability in the Search of the Opinion Collection Module of SMiCMS School CMS Group System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. SQL injection vulnerability exists in the search of the opinion collection module of the State Micro CMS school cluster system. Attackers can...

SQL Injection Vulnerability in the Messaging Module of SMiCMS School Group System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. SQL injection vulnerability exists in the station message module of the State Micro CMS school station group system. Attackers can use the...

Jieyang City Jike Computer Network Co., Ltd. website building system has SQL injection vulnerabilities

Jieyang City, Jike Computer Network Co., Ltd. is engaged in Internet business information, to provide from domain name registration, web hosting rental, web page design, production, maintenance, CGI writing, database design to the network homepage of the publicity, advertising, and a full range o...

Metinfo 6.1.0 SQL Injection Vulnerability in Background

MetInfo is a content management system developed using PHP and Mysql. Version 6.1.0 of the Metinfo website builder system has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive database information...

Chengdu Innovative Internet Technology Co., Ltd. website building system suffers from SQL injection vulnerability

Chengdu Innovative Internet Technology Co., Ltd. mainly provides customers with high-quality Internet services and technology development and other services. Chengdu Innovative Internet Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by...

SQL Injection Vulnerability in Metinfo Website Building System 6.0.0

Founded in March 2009, Changsha Mito Information Technology Co., Ltd. is an Internet enterprise focusing on "providing informatization services for small and medium-sized enterprises". A SQL injection vulnerability exists in Metinfo website builder 6.0.0, which can be exploited by attackers to...