997 matches found
SQL Injection Vulnerability in WSLoginMobile.asmx?wsdl Parameter on iOffice System
Redfan iOffice system is a Microsoft .NET technology based on the development of the establishment of notebooks, cell phones and other convenient terminals as a carrier to realize the mobile information system. iOffice system WSLoginMobile.asmx?wsdl parameter exists SQL injection vulnerability, t...
SQL Injection Vulnerability in Zendo 9.1.2 zentao\lib\base\dao\dao.class.php Page
Zendo is an open source project management software. Zendo project management software version 9.1.2 zentao\lib\base\dao\dao.class.php page SQL injection vulnerability. The orderBy function fails to filter the data submitted by the user, allowing an attacker to exploit the vulnerability to obtain...
SQL injection vulnerability in viewChannerParamXml.jsp file id parameter of Enterprise Customer Management Platform (ECMP)
Enterprise letter is the use of java development of a special tailored to the enterprise customer value-added SMS business, enterprise customers in the use of computers at the same time can be completed with the production of office combined with the internal SMS communication. SQL injection...
Youk365 Classifieds navigation system cate_deion parameter has sql injection vulnerability
Uc365 website classification and navigation system is a cross-platform open source software, you can build up a classified directory or website navigation site. The catedeion parameter of the Uke365 classifieds navigation system suffers from a sql injection vulnerability. Allow attackers to explo...
Vkflash image rotation management system A_ID parameter has SQL injection vulnerability
Vkflash Picture Rotation Management System is a set of Flash picture rotation management system based on RuoChi's Bcastr processing and secondary development. Vkflash Image Rotation Management System has a SQL injection vulnerability in the AID parameter, which can be exploited by attackers to...
Sweepstakes Pro Software SQL Injection Vulnerability
Sweepstakes Pro Software is a suite of sweepstakes software to increase email lists, increase social networking, and drive sales by running sweepstakes software in conjunction with sweepstakes. A SQL injection vulnerability exists in the s parameter in both win.php and widgetlb.php in Sweepstakes...
YXcmsApp V1.4.3 SQL Injection Vulnerability at Administrator Uninstalled Applications
Yxcms is an enterprise building system based on PHP and mysql technology. A SQL injection vulnerability exists in YXcmsApp V1.4.3 at the administrator uninstall application. The lack of filtering of the 'app' parameter allows an attacker to exploit the vulnerability to obtain sensitive informatio...
S-CMS newsview.asp page has a SQL injection vulnerability in the n_id parameter.
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A SQL injection vulnerability exists in the S-CMS newsview.asp page. The lack of filtering of the 'nid' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...
PHPCMS siteid parameter has SQL injection vulnerability
PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. PHPCMS is vulnerable to SQL injection. As the program failed to securely filter the encryption operation of siteid parameters...
ZZCMS V8.0 SQL Injection Vulnerability in admin/about.php File
ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the ZZCMS V8.0 admin/about.php file. The lack of filtering of the 'id' parameter obtained from $post'id' allows an attacker to exploit the vulnerability to obtain sensitive database information...
SQL injection vulnerability in mallbuilder frontend plugin_product_class.php page
MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. A SQL injection vulnerability exists in the pluginproductclass.php page in the frontend of mallbuilder, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...
SQL Injection Vulnerability in CWCMS v1.0
CWCMS is an enterprise website management system. A SQL injection vulnerability exists in version 1.0 of the CwCMS-PHP Enterprise Website Management System. It allows attackers to exploit the vulnerability to gain access to sensitive database information...
SQL Injection Vulnerability in Love Lover Matters Management System v4.0
LOVE LOVE Personnel Management System is a personnel management system for small and medium-sized enterprises as well as micro-enterprises. The system suffers from a SQL injection vulnerability in the login area. The program fails to perform strict filtering on the username variable, allowing an...
Semcms V2.1 header header injection vulnerability in frontend
SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms using php and vb language writing, combined with apache or iis running. Semcms foreign trade web content...
SemCms asp version search box has SQL injection vulnerability
SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms using php and vb language writing, combined with apache or iis running. SemCms asp version of the search b...
Itech B2B Script SQL Injection Vulnerability (CNVD-2017-01854)
B2B Script v4.29 is a versatile WEB solution for those who want to quickly publish their B2B portals in minutes. A SQL injection vulnerability exists in the 'id' field in the buyleads-details.php page in B2B Script v4.29, which can be exploited by an attacker to obtain sensitive information from...
Multi-meter (DuomiCms) film and television management system climit and ckey parameters exist SQL injection vulnerability
Duomi DuomiCms film and television management system is a set of specialized video on demand system. A SQL injection vulnerability exists in DuomiCms. The lack of filtering of the 'climit' and 'ckey' parameters allows an attacker to exploit the vulnerability to obtain sensitive database informati...
SQL Injection Vulnerability in iTrackGPS Monitoring Management System
iTrackGPS Monitoring Management System is a GPS monitoring system. A SQL injection vulnerability exists in iTrackGPS Monitoring Management System. The lack of filtering of the 'SystemNo' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in the 'token[]' Parameter of Shangyi CMS
Shangyi CMS, or 31cms for short, is a drop-in microsoft public platform management system. A SQL injection vulnerability exists in Business Easy CMS. The lack of filtering of the 'token' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...