iwebsns open source SNS system order_by parameter has a SQL injection vulnerability

iWebSNS is a large-scale high concurrency and high load of open source SNS software , based on iwebSuperInteraction iweb SI for short framework development . iwebsns open source SNS system orderby parameter has a SQL injection vulnerability . Attackers can use this vulnerability to obtain databas...

SQL Injection Vulnerability in admin_book.php Backend of BEESCMS Enterprise Website Management Department

BEESCMS is an enterprise website management system. A SQL injection vulnerability exists in the adminbook.php backend of the BEESCMS enterprise website management system. An attacker can exploit this vulnerability to obtain database information...

Henan Xuecheng Software Website Group Content Management System Exists SQL Injection Vulnerability

Henan Xuecheng Software Co., Ltd. website group content management system is a website building system. A SQL injection vulnerability exists in the content management system of Henan Xuecheng Software Co. The vulnerability exists in /cms/template/InfoShowDefault.js. An attacker can exploit the...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System v2.1.3 change_ship_free method

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. A SQL injection vulnerability exists in the Hanchao B2B2C Multi-User Mall System v2.1.3 changeshipfree method. An attacker can exploit this vulnerability to obtain database informati...

Hanchao B2B2C Multi-User Mall System v2.1.3 SQL Injection Vulnerability in ajax_active method

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall System v2.1.3 SQL injection vulnerability exists in the ajaxactive method. An attacker can exploit this vulnerability to to obtain database information...

SQL Injection Vulnerability in phpaaCMS

phpaaCMS is a simple article management system. A SQL injection vulnerability exists in /admin/category.add.php in phpaaCMS v0.5, which can be exploited by attackers to obtain sensitive information about the database...

Hanchao B2B2C Multi-User Mall System show method suffers from SQL Injection Vulnerability

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C multi-user mall system show method SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL injection vulnerability in 114La web site navigation building system

114La Web site navigation building system is a Web site navigation service. A SQL injection vulnerability exists in the 114La website navigation system. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in DM Enterprise Building System Search Function

DM building station is a set of open source cms developed by php + mysql. DM enterprise building system search function exists SQL injection vulnerability. Attackers can use the vulnerability to obtain database sensitive information...

Dreamline MONXIN has multiple XSS vulnerabilities

Monxin multi-store home mall system is a by Monxin technology to create a PC mall, mobile mall, micro letter mall, offline cash register system. There are multiple XSS vulnerabilities in Monxin. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in OA version 4.2.3 \app\cash\block\control.php File

RanZi Co-working System is an in-house management for small and medium-sized teams. A SQL injection vulnerability exists in the Ranzhi Synergy OA version 4.2.3 \app\cash\block\control.php file. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in thinksns v4.6.0

ThinkSNS open source sharing program is committed to providing sharing programs , light knowledge system , SNS social networking platform solutions , provide sharing source code free download. thinksns v4.6.0 there is a SQL injection vulnerability . Attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in thinksns v4.6.0

ThinkSNS is an open source social networking system under Wise. thinksns v4.6.0 suffers from a SQL injection vulnerability. An attacker can use this vulnerability to obtain database information...

SQL Injection Vulnerability in the Frontend of Axublog Blog System

axublog is a PHP personal blog system. A SQL injection vulnerability exists in the frontend of the Axublog blog system. An attacker can exploit this vulnerability to obtain sensitive database information...

Arbitrary File Read Vulnerability in catfishCMS

CatfishCMS is open source and free PHP CMS web content management system. An arbitrary file read vulnerability exists in catfishCMS. An attacker can exploit this vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Axublog Blog System

axublog is a PHP personal blog system. A SQL injection vulnerability exists in the Axublog blog system. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SDCMS Search Box SQL Injection Vulnerability

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. An SQL injection vulnerability exists in the SDCMS search box. The vulnerability stems from failure to filter user input. An attacker can exploit this vulnerability to obtain sensitive information from t...

eCom Cart SQL Injection Vulnerability

A SQL injection vulnerability exists in eCom Cart. The vulnerability allows attackers to obtain sensitive information about the database...

Joomla! JoomRecipe Component SQL Injection Vulnerability

Joomla! is a content management system. A SQL injection vulnerability exists in the JoomRecipe component of Joomla! The vulnerability allows attackers to obtain sensitive information about the database...

SQL injection vulnerability in Ruian Uber Technology website cms

Ruian UberTech Builders CMS is a secure and powerful Flash website management system based on PHP MYSQL. SQL injection vulnerability exists in Ruian UberTech website builder cms. An attacker can exploit this vulnerability to gain access to sensitive database information...