Dreamline MONXIN has multiple XSS vulnerabilities

Monxin multi-store home mall system is a by Monxin technology to create a PC mall, mobile mall, micro letter mall, offline cash register system. There are multiple XSS vulnerabilities in Monxin. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in OA version 4.2.3 \app\cash\block\control.php File

RanZi Co-working System is an in-house management for small and medium-sized teams. A SQL injection vulnerability exists in the Ranzhi Synergy OA version 4.2.3 \app\cash\block\control.php file. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in thinksns v4.6.0

ThinkSNS open source sharing program is committed to providing sharing programs , light knowledge system , SNS social networking platform solutions , provide sharing source code free download. thinksns v4.6.0 there is a SQL injection vulnerability . Attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in thinksns v4.6.0

ThinkSNS is an open source social networking system under Wise. thinksns v4.6.0 suffers from a SQL injection vulnerability. An attacker can use this vulnerability to obtain database information...

Arbitrary File Read Vulnerability in catfishCMS

CatfishCMS is open source and free PHP CMS web content management system. An arbitrary file read vulnerability exists in catfishCMS. An attacker can exploit this vulnerability to obtain sensitive information in the database...

SDCMS Search Box SQL Injection Vulnerability

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. An SQL injection vulnerability exists in the SDCMS search box. The vulnerability stems from failure to filter user input. An attacker can exploit this vulnerability to obtain sensitive information from t...

SQL Injection Vulnerability in Axublog Blog System

axublog is a PHP personal blog system. A SQL injection vulnerability exists in the Axublog blog system. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in the Frontend of Axublog Blog System

axublog is a PHP personal blog system. A SQL injection vulnerability exists in the frontend of the Axublog blog system. An attacker can exploit this vulnerability to obtain sensitive database information...

Joomla! JoomRecipe Component SQL Injection Vulnerability

Joomla! is a content management system. A SQL injection vulnerability exists in the JoomRecipe component of Joomla! The vulnerability allows attackers to obtain sensitive information about the database...

eCom Cart SQL Injection Vulnerability

A SQL injection vulnerability exists in eCom Cart. The vulnerability allows attackers to obtain sensitive information about the database...

Shenzhen Sodo technology enterprise station CMS SQL injection vulnerability

Shenzhen Sodo Technology enterprise station CMS is a specialized product for enterprise station building. SQL injection vulnerability exists in Shenzhen Sodo Technology Enterprise Station Building CMS. Attackers can use this vulnerability to obtain database information...

SQL Injection Vulnerability in Website Building System of Guangzhou Shuntian Computer Technology Co.

Shun Tian Technology is a domestic senior network technology service provider, with international leading website development technology, e-commerce technology, website full range of promotional technology and attentive after-sales customer service team. Guangzhou Shuntian Computer Technology Co....

SQL injection vulnerability in Ruian Uber Technology website cms

Ruian UberTech Builders CMS is a secure and powerful Flash website management system based on PHP MYSQL. SQL injection vulnerability exists in Ruian UberTech website builder cms. An attacker can exploit this vulnerability to gain access to sensitive database information...

SQL injection vulnerability in the hongbaobiaozhun parameter of the Shield Spirit public number promotion system v1.3

Shield Spirit public number promotion system is mainly applied to public number promotion alliance, suitable for personal and business subscription number and service number or enterprise number. Shield Spirit public promotion system v1.3 in the hongbaobiaozhun parameters exist sql injection...

DBShop e-commerce system has SQL injection vulnerability in the frontend

DBShop based on PHP official ZendFramework 2 framework for the development of a new generation of e-commerce system. A SQL injection vulnerability exists in the frontend of DBShop e-commerce system. An attacker can exploit the vulnerability to obtain database information...

Multiple SQL Injection Vulnerabilities in xycms 1.4 Version

Jiangsu Xinyue Technology focus on enterprise website construction services, China's excellent platform R & D and service providers, to provide enterprise website building system, station software; for domestic and foreign enterprises to provide a mature and reliable website construction and...

XYCMS b_title parameter has SQL injection vulnerability

XYCMS was formerly known as Nanjing XYCMS Enterprise Station Building System, which is a commercial station building system based on ASP development. A SQL injection vulnerability exists in the XYCMS btitle parameter. An attacker can exploit the vulnerability to obtain sensitive database...

CVE-2017-7314: Improper Authentication

An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, while creating a new role, a list of database tables and their columns is available...

SQL Injection Vulnerability in List_picture Parameter of SMiCMS Government Website System

State Micro CMS is one of the mainstream CMS systems in China, and is also the open source platform provider in the field of PHP in Southern China. State Micro CMS government website system listpicture parameter SQL injection vulnerability, the vulnerability is due to the failure of the user to...

SQL Injection Vulnerability in List_content Parameter of SMiCMS Government Website System

State Micro CMS for one of the country's most mainstream CMS systems, but also in southern China in the field of PHP open source platform provider. State Micro CMS government website system listcontent parameter SQL injection vulnerability , the vulnerability is due to the failure of the user to...