SQL Injection Vulnerability in ShopSn V2.0 Mall System

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd , a full-featured business standards in line with the enterprise-class truly allow free commercial use of open source online store system . ShopSn V2.0 mall system has a SQL injection vulnerability...

SQL injection vulnerability in the keyword parameter of KesionCMS KS.LogScore.asp page

KesionCMS intelligent website building system is a set of intelligent website building system developed by Xiamen Kesion Software Ltd. using ASP+ACCESS/MSSQL database architecture. A SQL injection vulnerability exists in the keyword parameter of KesionCMS KS.LogScore.asp page. Because the...

Joomla COM_ALPHACONTENT SQL Injection Vulnerability

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla COMALPHACONTENT version 4.0.11, which can be exploited by attackers to obtain sensitive database information...

CVE-2017-7314

An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, while creating a new role, a list of database tables and their columns is available...

Xionghai CMS system cid parameter exists sql injection vulnerability

XIONGHAI CMS is developed by XIONGHAI can be widely used in personal blogs, personal websites, corporate websites, a set of integrated website management system. Applicable to personal blogs, personal websites, corporate websites and other various purposes, the front end of the computer, mobile t...

INFOR EAM SQL Injection Vulnerability

Infor EAM is the best configurable enterprise-class asset management solution on the market. Improve capital asset management by increasing reliability, enhancing predictive maintenance, ensuring regulatory compliance, reducing energy consumption, and supporting sustainability programs. An SQL...

SQL Injection Vulnerability in WSLoginMobile.asmx?wsdl Parameter on iOffice System

Redfan iOffice system is a Microsoft .NET technology based on the development of the establishment of notebooks, cell phones and other convenient terminals as a carrier to realize the mobile information system. iOffice system WSLoginMobile.asmx?wsdl parameter exists SQL injection vulnerability, t...

SQL Injection Vulnerability in Zendo 9.1.2 zentao\lib\base\dao\dao.class.php Page

Zendo is an open source project management software. Zendo project management software version 9.1.2 zentao\lib\base\dao\dao.class.php page SQL injection vulnerability. The orderBy function fails to filter the data submitted by the user, allowing an attacker to exploit the vulnerability to obtain...

SQL injection vulnerability in viewChannerParamXml.jsp file id parameter of Enterprise Customer Management Platform (ECMP)

Enterprise letter is the use of java development of a special tailored to the enterprise customer value-added SMS business, enterprise customers in the use of computers at the same time can be completed with the production of office combined with the internal SMS communication. SQL injection...

Youk365 Classifieds navigation system cate_deion parameter has sql injection vulnerability

Uc365 website classification and navigation system is a cross-platform open source software, you can build up a classified directory or website navigation site. The catedeion parameter of the Uke365 classifieds navigation system suffers from a sql injection vulnerability. Allow attackers to explo...

Vkflash image rotation management system A_ID parameter has SQL injection vulnerability

Vkflash Picture Rotation Management System is a set of Flash picture rotation management system based on RuoChi's Bcastr processing and secondary development. Vkflash Image Rotation Management System has a SQL injection vulnerability in the AID parameter, which can be exploited by attackers to...

Sweepstakes Pro Software SQL Injection Vulnerability

Sweepstakes Pro Software is a suite of sweepstakes software to increase email lists, increase social networking, and drive sales by running sweepstakes software in conjunction with sweepstakes. A SQL injection vulnerability exists in the s parameter in both win.php and widgetlb.php in Sweepstakes...

YXcmsApp V1.4.3 SQL Injection Vulnerability at Administrator Uninstalled Applications

Yxcms is an enterprise building system based on PHP and mysql technology. A SQL injection vulnerability exists in YXcmsApp V1.4.3 at the administrator uninstall application. The lack of filtering of the 'app' parameter allows an attacker to exploit the vulnerability to obtain sensitive informatio...

S-CMS newsview.asp page has a SQL injection vulnerability in the n_id parameter.

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A SQL injection vulnerability exists in the S-CMS newsview.asp page. The lack of filtering of the 'nid' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

PHPCMS siteid parameter has SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. PHPCMS is vulnerable to SQL injection. As the program failed to securely filter the encryption operation of siteid parameters...

ZZCMS V8.0 SQL Injection Vulnerability in admin/about.php File

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the ZZCMS V8.0 admin/about.php file. The lack of filtering of the 'id' parameter obtained from $post'id' allows an attacker to exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in mallbuilder frontend plugin_product_class.php page

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. A SQL injection vulnerability exists in the pluginproductclass.php page in the frontend of mallbuilder, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in CWCMS v1.0

CWCMS is an enterprise website management system. A SQL injection vulnerability exists in version 1.0 of the CwCMS-PHP Enterprise Website Management System. It allows attackers to exploit the vulnerability to gain access to sensitive database information...

SQL Injection Vulnerability in Love Lover Matters Management System v4.0

LOVE LOVE Personnel Management System is a personnel management system for small and medium-sized enterprises as well as micro-enterprises. The system suffers from a SQL injection vulnerability in the login area. The program fails to perform strict filtering on the username variable, allowing an...

Semcms V2.1 header header injection vulnerability in frontend

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms using php and vb language writing, combined with apache or iis running. Semcms foreign trade web content...