Jiayuan Talent Website Management System fr_admin_name parameter has SQL injection vulnerability

Jiayuan Talent Website Management System is a website management system based on PHP+MYSQL technology. A SQL injection vulnerability exists in the fradminname parameter of the Jiayuan Talent Website Management System. The program fails to effectively filter the fradminname parameter, allowing...

Golden Magpie Door Enterprise Management Software Has Multiple SQL Injection Vulnerabilities

Golden Magpie Door Enterprise Management Software is a comprehensive management system for the production and sales of wooden door manufacturers and the purchase of customers. There are multiple SQL injection vulnerabilities in Golden Magpie Door Enterprise Management Software, which can be...

SQL Injection Vulnerability in Pisces Forest PHP Based MVC Faculty Selection Grade Management System

Pisces forest PHP based MVC faculty elective course grade management system is based on a three-tier model to develop faculty elective course grade management system. SQL injection vulnerability exists in the PHP based MVC Academic Record Management System ARMS. The vulnerability allows attackers...

SQL Injection Vulnerability in YxtCMF Online Learning System

YxtCMF online learning system is an online learning platform system developed with thinkphp+bootstrap as the framework. YxtCMF Online Learning System is vulnerable to SQL injection. The lack of filtering due to the '$state=I"get.state";' parameter allows an attacker to exploit the vulnerability t...

SQL Injection Vulnerability in Department Parameters of Guangzhou Zhongda Kaixuan Electronic Technology Co.

Guangzhou Zhongda Kaixuan Electronic Technology Co., Ltd. online office hall is a comprehensive e-government service platform integrating social management, public service, information disclosure and efficiency supervision. There is a SQL injection vulnerability in the department parameter of the...

hdwiki anticopy.class.php SQL Injection Vulnerability

Interactive Wiki open source system HDwiki is by the interactive online Beijing Technology Co., Ltd. launched a free wiki Wiki building system. hdwiki anticopy.class.php SQL injection vulnerability allows attackers to exploit the vulnerability to obtain sensitive information from the website...

hdwiki pms.php SQL Injection Vulnerability

Interactive Wiki open source system HDwiki is a free interactive online Beijing Technology Co. A SQL injection vulnerability exists in hdwiki pms.php, which allows attackers to exploit the vulnerability to obtain sensitive information from the website database...

SQL Injection Vulnerability in Bidding Member System of Jiangsu Guotai New Point Software Co.

An electronic bidding system is a means of trading on a public resources trading platform. There is a SQL injection vulnerability in the bidding membership system of Jiangsu Guotai New Point Software Co., Ltd. that can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Wave OA Intelligent Office Platform

Longchamp Yunhai OA Intelligent Office Platform is aimed at the private and hybrid cloud market, providing open and secure enterprise-class cloud data center operation and maintenance management capabilities. SQL injection vulnerability exists in the Wave OA Office system, allowing attackers to...

SQL Injection Vulnerability in AVCON6 System Management Platform Name Parameter at Warburg Pincus Information Technology Co.

Huaping Information Technology Co., Ltd. is committed to promoting the innovation of business models in various industries and the enhancement of people's life intelligence through the innovative "Internet +" video technology. A SQL injection vulnerability exists in the name parameter of AVCON6...

SQL Injection Vulnerability in School Management System of Shenzhen Chuangyou Network Co.

Shenzhen Chuangyou Networks school management system is a secondary school-based education management software. The product /sysTemplateWeb/ShowWebStyle.aspx?XXDM=440203000008&CatalogId= there is a SQL injection vulnerability, the injection parameter is CatalogId, the attacker can use the...

SQL injection vulnerability in the id parameter of the page of the digital newspaper system /www/index.php?mod=admin&con=adminuser&act=mypwdpost

Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There are SQL injection vulnerabilities in this product, the vulnerability URL is: /www/index.php?mod=admin&con=adminuser&act=mypwdpost, the vulnerability parameter is: id, POST method of injection, the...

SQL Injection Vulnerability in Beijing YINO Internet Website Construction System

YINO Internet website construction system provides unique website construction solutions for customers in various industries in Beijing. The product exists SQL injection vulnerability, vulnerability URL: http://host/productsshow.asp?lbid=, vulnerability parameters for lbid =, GET-type injection,...

SQL Injection Vulnerability in the groupUrl Parameter of getGroupedProjectTemplate on the Internet User Speed Measurement Platform of Freescale Technology (Beijing) Co.

FeiShiDa Technology Beijing Co., Ltd. Internet user speed test platform is used to provide users with mobile broadband online test WEB system. The product has a SQL injection vulnerability, the vulnerability URL is: http://target/getGroupedProjectTemplate?groupUrl=, the injection parameter is:...

SQL Injection Vulnerability in OA Office System Login.aspx Page oid Parameters

The full OA office system is a software that provides efficient and smooth information channel for the daily office management, official document management, work request, report, file, knowledge system, budget control and other management of the enterprise. There is a SQL injection vulnerability...

SQL injection vulnerability in the ID parameter of the GG.aspx page of the Quality Supervision Station Comprehensive Information Service Platform of Zhuhai Xinhua Tong Software Co.

ZHXHT Supervision and Regulation Comprehensive Service Platform is a comprehensive platform integrating engineering supervision, testing supervision, commercial mixing supervision, web portal, commercial mixing quality networking supervision, credit rating, OA office, SMS system, wireless...

SQL injection vulnerability in the zwkm parameter of the modifyzdjb.jsp page of the ilasIII digital library system of Shenzhen Ketu Automation New Technology Application Company.

Integrated Library Automation System ILAS is the Ministry of Culture in 1988 as a national key scientific and technological projects issued by the Shenzhen Library to undertake and organize the development of a set of libraries at home and abroad to adapt to different levels, a variety of scales,...

SQL injection vulnerability in library_id parameter of book retrieval system hold.jsp page at Beijing Chuangxun Future Software Technology Co.

Beitronix Library Public Access System is a system-integrated WEB system for the library industry. The product has a SQL injection vulnerability, the vulnerability URL is /opactwo/search2/hold.jsp?libraryid=, similar parameter is libraryid, the attacker can use the vulnerability to obtain the...

SQL Injection Vulnerability in the Code Parameter of the Public Retrieval System /opac_two/detail Page of Beijing Chuangxun Future Software Technology Co.

Beitronix Library Public Access System is a system-integrated WEB system for the library industry. There is a SQL injection vulnerability in this product, the vulnerability URL is: /opactwo/detail?code=&name=, the code parameter exists to inject, the attacker can use the vulnerability to obtain t...

SQL Injection Vulnerability in Asset Management System sysbh Parameter of Jinan Guozi Digital Technology Co.

Asset management system of Jinan Guozi Digital Technology Co., Ltd. is a set of sharing and management platform for precision instruments or large instruments. The product suffers from SQL injection vulnerability, the vulnerability URL is: http://host/dxyqsyspt/sysDetail.aspx?sysbh=000001 The...