SQL Injection Vulnerability in Mythos™ Documentation Management System

Mythos™ Document Management System is a library management reference platform with a professional database as the backend data storage on Windows or UNIX/Linux platform. A SQL injection vulnerability exists in Mythic™ Document Management System, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in ViewOpern.aspx Page ID Parameter of Jinpan Non-Book Data Management System

Jinpan non-book information management system software is a set of B/S and C/S combined management system for the current common format files launched by Beijing Jinpan Tu Software Technology Co., Ltd. mainly provides readers with non-book resources remote call service, including: with the book...

IBM Sterling B2B Integrator Standard Edition SQL Injection Vulnerability

IBM Sterling B2B Integrator Standard Edition is the standard edition of a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A SQL injection...

SQL Injection Vulnerability in UCMS 'ajax.php' File

UCMS is a simple open source content management system. A SQL injection vulnerability exists in the UCMS 'ajax.php' file, which can be exploited by attackers to obtain sensitive information about the database...

Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2017-20513)

Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Analysis Services in Microsoft SQL Server. An attacker c...

NexusPHP v1.5 cheaterbox.php file has SQL injection vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. NexusPHP v1.5 cheaterbox.php file delcheater parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

DzzOffice v1.3.1 SQL Injection Vulnerability in Frontend

DzzOffice is a cloud storage management tool , based on the free open source release , can be used as a personal network disk , team , enterprise network disk for use . A SQL injection vulnerability exists in DzzOffice v1.3.1 due to the program failing to strictly filter the keyword parameter...

SQL injection vulnerability of menuqx[1][6] parameter on roles.control.mydecms.php page of Xiancheng website builder system

Xiancheng building system is a set of PHP + mysql architecture with free open source article management system program. Xiancheng website builder system role.control.mydecms.php page menuqx16 parameter SQL injection vulnerability. Due to the system failing to effectively filter user-submitted dat...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System v2.1.6 [CNVD-2017-20678]

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall System v2.1.6 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in finecms Frontend Field Parameters

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A SQL injection vulnerability exists in the frontend field parameter of finecms. An attacker can exploit this vulnerability to obtain database information...

Finecms foreground catid parameter has SQL injection vulnerability

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. An SQL injection vulnerability exists in the frontend catid parameter of finecms. An attacker can exploit this vulnerability to obtain database information...

iwebsns open source SNS system order_by parameter has a SQL injection vulnerability

iWebSNS is a large-scale high concurrency and high load of open source SNS software , based on iwebSuperInteraction iweb SI for short framework development . iwebsns open source SNS system orderby parameter has a SQL injection vulnerability . Attackers can use this vulnerability to obtain databas...

SQL Injection Vulnerability in admin_book.php Backend of BEESCMS Enterprise Website Management Department

BEESCMS is an enterprise website management system. A SQL injection vulnerability exists in the adminbook.php backend of the BEESCMS enterprise website management system. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System v2.1.3 change_ship_free method

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. A SQL injection vulnerability exists in the Hanchao B2B2C Multi-User Mall System v2.1.3 changeshipfree method. An attacker can exploit this vulnerability to obtain database informati...

Henan Xuecheng Software Website Group Content Management System Exists SQL Injection Vulnerability

Henan Xuecheng Software Co., Ltd. website group content management system is a website building system. A SQL injection vulnerability exists in the content management system of Henan Xuecheng Software Co. The vulnerability exists in /cms/template/InfoShowDefault.js. An attacker can exploit the...

Hanchao B2B2C Multi-User Mall System v2.1.3 SQL Injection Vulnerability in ajax_active method

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall System v2.1.3 SQL injection vulnerability exists in the ajaxactive method. An attacker can exploit this vulnerability to to obtain database information...

SQL Injection Vulnerability in phpaaCMS

phpaaCMS is a simple article management system. A SQL injection vulnerability exists in /admin/category.add.php in phpaaCMS v0.5, which can be exploited by attackers to obtain sensitive information about the database...

Hanchao B2B2C Multi-User Mall System show method suffers from SQL Injection Vulnerability

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C multi-user mall system show method SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL injection vulnerability in 114La web site navigation building system

114La Web site navigation building system is a Web site navigation service. A SQL injection vulnerability exists in the 114La website navigation system. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in DM Enterprise Building System Search Function

DM building station is a set of open source cms developed by php + mysql. DM enterprise building system search function exists SQL injection vulnerability. Attackers can use the vulnerability to obtain database sensitive information...