CVE-2017-7973

A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of arbitrary SQL commands against the underlying database...

fedteq.com XSS vulnerability

Vulnerable URL: http://www.fedteq.com/shoperror.asp?msg="The+shopping+database+could+not+be+read.+Please+contact+the+site+owner. Open+Messages Unrecognized+database+format+'D:\inetpub\fedteq\database\toms95fedteq.mdb'.+ Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

IBOS Enterprise Collaboration Management Software NewsController.php page actionTop function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the NewsController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the vulnerability to obtain sensitiv...

SQL Injection Vulnerability in BageCms Content Management System (CNVD-2017-28290)

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system suffers from a SQL injection vulnerability , the vulnerability is due to the system fails to effectively filter the parameters , the attacker can use the...

SQL Injection Vulnerability in IMGCMS Attach.php and Article.php Pages

IMGCMS is a set of CMS management program focusing on the development of image-based websites. It adopts the most efficient PHP+MYSQL architecture and can run on different platforms Windows, Linux, Unix. IMGCMS Attach.php and Article.php pages are vulnerable to SQL injection. Attackers can use th...

SQL injection vulnerability in OURPHP background ourphp_articleview.php page

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. A SQL injection vulnerability exists in the ourphparticleview.php page in the background of OURPHP. Attackers can use this vulnerability to obtain sensitive database...

Harbin Fengteng E-commerce Co., Ltd. SQL injection vulnerability exists in class_id parameter of pic.php page of Fengteng E-commerce station building system.

Fengteng e-commerce website building system is a website building system. Harbin Fengteng E-commerce Co., Ltd. fengteng e-commerce station building system pic.php page classid parameter SQL injection vulnerability, an attacker can exploit the vulnerability to obtain database sensitive information...

SQL injection vulnerability in the lbid parameter of artlist_detail.php of Jiujiang Lianchuang Network Technology Co.

Jiujiang Lianchuang Network Technology Co., Ltd. building system is a website building system. A SQL injection vulnerability exists in the lbid parameter of the artlistdetail.php page of Jiujiang Lianchuang Network Technology Co. An attacker can exploit this vulnerability to obtain sensitive...

IBOS open source latest version of MailController.php page actionIndex function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionIndex function on the MailController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the...

SQL Injection Vulnerability in Cloud EC E-commerce System Goods.edit.php Page

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system goods.edit.php page SQL injection vulnerability. The vulnerability is due to the...

SQL Injection Vulnerability in CMS ArticleAction.class.php Page

Fargo CMS is a marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the CMS ArticleAction.class.php page. The vulnerability is due to the system flag parameter does not filter the data submitted by the user, a remote attacker c...

DuoDuoRebate.com System_V8.3 list.act.php suffers from SQL Injection Vulnerability

DuoDuo rebate system is for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuoRebate.com SystemV8.3 list.act.php SQL injection vulnerability. The vulnerability due to the system code parameters do not filter the data submitted by the user , a...

Calendar Planner Component SQL Injection Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system developed using PHP and MySQL.Calendar Planner is a complete, easy-to-use calendar tool. A SQL injection vulnerability exists in the Joomla! Calendar Planner component, which can be exploited by an attacker to obtain sensitive...

SQL Injection Vulnerability in Paysan Network Backend Management System

Paixiang network backstage management system is a station-building system developed by Zhejiang Soupai Information Technology Co. There is a SQL injection vulnerability in the id parameter of PaiSang's backend management system, which can be exploited by an attacker to obtain sensitive informatio...

SQL Injection Vulnerability in Xiaowei OA System of Beijing Xiaowei Help Technology Co.

Xiaowei OA system is Beijing Xiaowei Help Technology Co., Ltd. to provide mobile office platform for small and medium-sized enterprises. Ltd. SQL injection vulnerability exists in the small micro OA system, an attacker can use the vulnerability to obtain sensitive information in the database...

NexusPHP V1.5 suffers from SQL Injection Vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP v1.5, due to the program cheaterbox.php file fails to strictly filter the conusr parameter. Attackers can use this vulnerability to obtain...

IBOS Enterprise Collaboration Management Software MyshareController.php page actionShare function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionShare function on the MyshareController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the...

OAKlouds CCm@il 'password_hint' parameter SQL Injection Vulnerability at Huanji Technology Co.

OAKlouds CCm@il is a group collaborative communication system. A SQL injection vulnerability exists in the OAKlouds CCm@il 'passwordhint' parameter of Huanji Technology Co. An attacker can exploit this vulnerability to obtain sensitive database information...

PHPSHE open source mall system moneylog.php SQL injection vulnerabilities exist

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. HPSHE open source mall system moneylog.php SQL...

ShopsN v3.0 SQL Injection Vulnerability in Frontend ProductController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 beta3 version ProductController.class.php file contains a SQL injection vulnerability , due to the system failed to strictly filter the guess function . Remote attackers can exploit the vulnerability to obtain sensitive database...