SQL Injection Vulnerability in Ming Enterprise Technology Website Construction System

Shanghai Ming Enterprise Information Technology Co., Ltd Ming Enterprise Technology is engaged in website construction, network marketing, domain name hosting and Internet application development. A SQL injection vulnerability exists in Ming Enterprise's website construction system. The...

CVE-2017-15864

In the Agent Frontend in Open Ticket Request System OTRS 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password...

EasySNS Minimalist Community callback_pingfen method and checkusergroupinfo method have SQL injection vulnerabilities

EasySNS Minimalist Community Group Edition is a new database architecture and program structure to form an interactive community with a group as the basic unit. EasySNS Minimalist Community callbackpingfen method and checkusergroupinfo method have SQL injection vulnerability, the vulnerability is...

SQL Injection Vulnerability in Youkai 365 Business v1.5 System

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. A SQL injection vulnerability exists in the UX365 Business v1.5 system, which is caus...

SQL Injection Vulnerability in Axublog v1.0.6 hit.php Page

Axublog is a PHP personal blog system. A SQL injection vulnerability exists in the Axublog v1.0.6 hit.php page. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in MIPCMS ApiAdminUser.php Page

MIPCMS is a free and open source based on Baidu Mobile Accelerator MIP engine based on the development of articles, information, content management system, but also the system for the Internet webmasters, entrepreneurs and other groups to create SEO-optimized after the station-building system. A...

SQL Injection Vulnerability in WebShow Shopping System V5.4

Net show shopping system is a shopping site developed with asp + access. Nethub Shopping System V5.4 front-end textBox3.asp exists SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Multiple SQL Injection Vulnerabilities in phpaaCMS

phpaaCMS is a simple article management system. A SQL injection vulnerability exists in /search.php and /message.php in phpaaCMS v0.5, which can be exploited by attackers to obtain sensitive information about the database...

SQL Injection Vulnerability in DM Enterprise Building System v201710

DM building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM enterprise website building system v201710 login at the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in Zendo Version 9.1.2

Zendo is an open source project management software. A SQL injection vulnerability exists in Zendo version 9.1.2 due to the system failing to effectively filter user-submitted data. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in phpaacms page.php File

phpaaCMS is a simple article management system. A SQL injection vulnerability exists in the phpaacms page.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in 74cms MembersController.class.php Page

Knight Talent System 74cms is a free website management system based on PHP+MYSQL. A SQL injection vulnerability exists in the 74cms MembersController.class.php page, which can be exploited by attackers to obtain sensitive database information...

Catfish CMS v4.5.7 SQL Injection Vulnerability in Frontend

Catfish CMS is open source free PHP CMS web content management system. Catfish CMS v4.5.7 suffers from a SQL injection vulnerability in the frontend. An attacker can exploit this vulnerability to obtain sensitive database information...

NexusPHP SQL Injection Vulnerability (CNVD-2017-27285)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in the forummanage.php file in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in OrderController.class.php in ShopsN 2.0 Official Frontend

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. ShopsN 2.0 official version of the front-end OrderController.class.php SQL injection...

SQL Injection Vulnerability in WCMS AnonymousController.php File

WCMS is a CMS for editors, an editor-oriented editor. A SQL injection vulnerability exists in the WCMS AnonymousController.php file. The vulnerability is due to the system failing to effectively filter user-submitted data. An attacker can exploit this vulnerability to obtain sensitive database...

ShopsN 2.0 official version of the foreground question_edit method SQL injection vulnerability

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. ShopsN 2.0 official version of the foreground questionedit method SQL injection...

ShopsN 2.0 official version of the front-end enterprise_group method SQL injection vulnerability

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. ShopsN 2.0 official version of the foreground enterprisegroup method SQL injection...

SQL Injection Vulnerability in SDCMS v1.2 Tag Lists

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDCMS v1.2 version of the label list exists SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

SQL injection vulnerability in OURPHP backend ourphp_callback.php page

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. A SQL injection vulnerability exists in the background ourphpcallback.php page of OURPHP. Attackers can use this vulnerability to obtain sensitive database informatio...