2242 matches found
MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16408)
MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...
SQL injection vulnerability in the website building system of Xinghua Xinwang Information Consulting Service Department (CNVD-2021-16005)
Xinghua letter network is a professional engaged in, Baidu keyword optimization and enterprise website construction and e-commerce services of the service provider. Xinghua City letter network information consulting services department building system there are SQL injection vulnerabilities,...
CVE-2021-26685: Improper Neutralization of Special Elements used in an SQL Command
A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...
SQL Injection Vulnerability in Ar***.asp of Website Building System of Guangzhou Hande Network Technology Co.
HANDS network originated from ten years ago, the studio is committed to providing users with high-quality website construction solutions, business covering PC station, mobile station, to provide high-quality customized and special templates station building services. Ltd. website building system...
XYCMS suffers from SQL injection vulnerability (CNVD-2021-17386)
XYCMS is an enterprise building system developed with asp+access. XYCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain database information...
HcCMS suffers from SQL injection vulnerability (CNVD-2021-17282)
HcCms is a free website building system developed in php language. Developed using the widely popular PHP MYSQL. HcCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
PT-2021-11048
Name of the Vulnerable Software and Affected Versions: Mailtrain versions 1.24.1 and earlier Description: The issue allows SQL Injection in the statsClickedSubscribersByColumn function in lib/models/campaigns.js via the "/campaigns/clicked/ajax" API endpoint because variable column names are not...
SQL Injection Vulnerability in zzcms 2020 (CNVD-2021-17363)
zzcms is a content management system. A SQL injection vulnerability exists in zzcms 2020, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in Shangye Academic Portal Management Software
Founded in 2007, Shangye Technology is a high-tech enterprise integrating development, processing, agency and sales. Its main business includes electronic resources, software development and new media applications, providing information resource solutions and all-round technical and consulting...
Sql injection
Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...
CVE-2020-36002
Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...
Haiyan Chuangyi Software Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-16391)
Haiyan Chuangyi Software Technology Co., Ltd. is a high-tech enterprise specializing in research and development, application and service in the field of computer information technology. Haiyan Chuangyi Software Technology Co., Ltd. has a SQL injection vulnerability in its website building system...
CVE-2020-36002: Improper Neutralization of Special Elements used in an SQL Command
Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...
SQL Injection Vulnerability in the Website Building System of Foshan City Sohu Network Technology Co.
Foshan City, Sohu Network Technology Co., Ltd. is a commitment to provide a full range of web site construction services for the enterprise Internet company. Foshan City, Sohu Network Technology Co., Ltd. building system there is a SQL injection vulnerability, attackers can use the vulnerability ...
SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co. Ltd (CNVD-2021-14897)
Inner Mongolia Hohai Trade Co., Ltd. to enterprises and institutions for the construction of information technology. Mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection...
Chengdu Zero Takeoff Network 07FLY-CRM V1 has SQL Injection Vulnerability
07FLY-CRM is zero take-off network development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed assets, public...
SQL Injection Vulnerability in the Website Building System of Shaanxi Yahuang Science and Technology Co.
Ltd. is a professional networking company for Xi'an website construction, Xi'an website construction and design, Xi'an website construction and promotion, Xi'an website construction and optimization. Ltd. website building system suffers from SQL injection vulnerability, which can be exploited by...
SQL Injection Vulnerability in the Website Building System of Shaanxi Yahuang Science and Technology Co.
Ltd. is a professional networking company for Xi'an website construction, Xi'an website construction and design, Xi'an website construction and promotion, Xi'an website construction and optimization. Ltd. website building system suffers from SQL injection vulnerability, which can be exploited by...
SQL Injection Vulnerability in the Website Building System of Shaanxi Yahuang Science and Technology Co.
Ltd. is a professional networking company for Xi'an website construction, Xi'an website construction and design, Xi'an website construction and promotion, Xi'an website construction and optimization. Ltd. website building system suffers from SQL injection vulnerability, which can be exploited by...
SQL Injection Vulnerability in Kotto's Fully Intelligent Parking Video Charging System (CNVD-2021-14456)
Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in KTO's fully intelligent parking video charging system, which can be exploited by an...