SQL Injection Vulnerability in Engineering Management System of Bonjour Technology Co.

The Project Management System is a complete project management solution. A SQL injection vulnerability exists in the Engineering Management System of Bonjour Technology. The URL where SQL injection exists is http://112.64.161.74:8000/, and the attacker obtains sensitive information about the...

SQL Injection Vulnerability in Zixiang OA Office System/OpenWindows/Openleibie_zlMc.aspx?id=parameter

Zhixiang OA office system is an enterprise office system. A SQL injection vulnerability exists in the OpenWindows/OpenleibiezlMc.aspx?id= parameter of the Zhixiang OA Office System, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Panmicro OA Office System Requestid Parameter

Panavision OA Office System is a coordination office software. A SQL injection vulnerability exists in the Panmicro OA Office System requestid parameter, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

Gobetters Video Conferencing System/web/systemconfig/guangboinfo.php?id=1&from=list parameter has SQL injection vulnerability

GoBetter video conferencing system is a pure software video conferencing system with high-performance audio and video interactions, as well as perfect data functions launched by GoBetter. An SQL injection vulnerability exists in the /web/systemconfig/guangboinfo.php?id=1&from=list parameter of th...

SQL Injection Vulnerability in OA System of Guangdong Oriental Thinking Technology Co.

Ltd. OA system is a set of office automation system, can solve the enterprises and institutions, government agencies, office automation and paperless office and other issues. Ltd. OA system there are SQL injection vulnerabilities, there are vulnerabilities in the link:...

[CVE-2014-7303] SGI Tempo System Database Exposure

SGI Tempo System Database Exposure Software: SGI Tempo SGI ICE-X Supercomputers Affected Versions: Unknown CVE Reference: CVE-2014-7303 Author: John Fitzpatrick, MWR Labs Severity: Low Risk Vendor: Silicon Graphics International Corp SGI Vendor Response: Uncooperative Description It is possible f...

SQL Injection Vulnerability in Mail Parameters of Submission System of Nanjing Jenohan Software Technology Co.

A generic SQL injection vulnerability exists in the submission system of Nanjing Jenohan Software Technology Co. Ltd. that allows an attacker to access sensitive information in the database. A SQL injection vulnerability exists in the Mail parameter in the Submission System/liuyan.aspx of Jenohan...

Joomla/WordPress XCloner Command Execution / Password Disclosure

XCloner plugin version 3.1.1 for WordPress and 3.5.1 for Joomla! suffers from arbitrary command execution, MySQL password disclosure, database backups exposed, unauthenticated remote access, and various other vulnerabilities. Title: XCloner Wordpress/Joomla! backup Plugin v3.1.1 Wordpress v3.5.1...

强智科技教务系统存在SQL注入漏洞导致多校中枪……

简要描述： 强智科技教务系统存在SQL注入漏洞，多校中枪…… 详细说明： 这个算是CMS吧？ 中枪学校及注入点 湖南商学院：http://jwgl.hnuc.edu.cn/Public/ShowGGTZ.asp?GGTZID=317【这里】 北京城市学院：http://114.255.66.248/jiaowu/Public/ShowGGTZ.asp?GGTZID=218【这里】 焦作大学：http://jw.jzu.cn/jiaowu/Public/ShowGGTZ.asp?GGTZID=1155【这里】...

School hassle-free voting system The use of 0day-vulnerability warning-the black bar safety net

Actually, it's not a 0day. Just a thought., recently bored. Disregard on the A5 looked under and found a voting system, rough look, with people a lot, so it is down under, study, the machine is set up to see, the code basically is nothing vulnerability, is my art bad bar, and transfer station, th...

Blizzard's Mobile Server Database Exposed by Warv0x (AKA Kaihoe)

Blizzard's Mobile Server Database Exposed byWarv0x AKA Kaihoe Warv0x AKA Kaihoe Hacker today expose the Database structure of one of the biggest Company "Blizzard Mobile ". The exposed data can be seen on a pastebin link. DATABASES EXPOSED LIST : admin egw glpi informationschema lost+found...

Critical Security Upgrade Notice for FormIt, Quip and Login

We received a report of a potential vulnerability in FormIt, Quip and Login that could be used to expose system settings including database information. This has been been corrected and new versions have been posted. Upgrading of FormIt, Login and Quip to the latest versions via Package Manager...

Improper access control

CNR Hikaye Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/hikaye.mdb...

eSmile Script - 'index.php' SQL Injection

eSmile index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : eSmile .:. Bug Type : Sql InjectionMysql .:. Dork : "Powered by: eSmile" =...

When the website does not allow upload ASP,CGI,CER,CDX,HTR and other types of files-bug warning-the black bar safety net

Method:Upload a shtm file, content is:!-- include file="conn. asp" - A direct request to the shtm file,conn. asp is unobstructed, the database path is also on hand. Parsing:!-- include file="conn. asp" - is an SSI Directive,its role is the"conn. asp"to copy the contents to the current page,when a...

CVE-2008-6872

Affected software: ASPThai.NET ASPThai Forums 8.5. The vulnerability is improper access control that lets an attacker access the webroot-stored database file database/aspthaiForum.mdb via a direct request, exposing sensitive data. This is the underlying cause: insecure storage and access control ...

CVE-2009-1322

ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb...

CVE-2003-1571

CVE-2003-1571 affects Web Wiz Guestbook 6.0 (and later 8.21 per note) where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to download the database via a direct request to database/WWGguestbook.mdb. The underlying issue is inadequate access...

Improper access control

Easy Content Management Publishing stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database/News.mdb...

cf shopkart 5.2.2 - SQL Injection / File Disclosure

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : CF SHOPKART V5.2.2 download : http://www.cfshopkart.com/dl/cfshopkart522.rar Demo : http://www.cfshopkart.com/demos/cfshopkart522/...