RockOA SQL Injection Vulnerability (CNVD-2021-10487)

RockOA Xinhuo is an open source office OA system. Rockoa v1.8.7 version of the existence of SQL injection vulnerability , the vulnerability customerAction.php in the filtering parameter does not do effective filtering of user input , a remote attacker through the injection of SQL statements to...

RockOA SQL Injection Vulnerability (CNVD-2021-10485)

RockOA Xinhuo is an open source office OA system. Rockoa v1.8.7 version of the existence of SQL injection vulnerability , the vulnerability wwordAction.php parameters in the user input is not effectively filtered , a remote attacker by obtaining the injection of SQL statements to execute access t...

SQL Injection Vulnerability in Monthly Care ERP Management Platform of Wuhan Jin Tongfang Technology Co.

Wuhan Jin Tongfang Technology Co., Ltd. is a company that provides informatization solutions for the mother and child service industry. There is a SQL injection vulnerability in the monthly care ERP management platform of Wuhan Golden Tongfang Technology Co. Ltd, which can be exploited by attacke...

SQL Injection Vulnerability in JTopCMS Backend of Hefei Mingjing Information Technology Co.

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Hefei Mingjing Information Technology Co., Ltd. JTopCMS background SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in PMedia Platform of Shenzhen Huadean Technology Co.

Ltd. is a company dedicated to providing competitive mobile law enforcement system products for public security police, business administration and other law enforcement units. Ltd. PMedia Platform suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

SQL injection vulnerability in ab***.php page of website building system of Guangzhou Chuangke Network Technology Co.

Guangzhou Chuangke Network Technology Co., Ltd. is a business service company that provides customers with marketing website construction, network marketing promotion, website hosting operation, website production, website design, website promotion and maintenance, website SEO optimization, WeCha...

CVE-2021-25232

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL database...

CVE-2021-25229

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server...

Trend Micro OfficeScan XG 和 Trend Micro Apex One 访问控制错误漏洞

Trend Micro OfficeScan XG and Trend Micro Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a distributed anti-virus software suite, and Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response capabilities. Tre...

Trend Micro OfficeScan XG和Trend Micro Apex One 信息泄露漏洞

Trend Micro OfficeScan XG and Trend Micro Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a distributed anti-virus software suite, and Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response capabilities. Tre...

SQL Injection Vulnerability in VUMC Cloud at Shanghai VUMC Software Co. Ltd (CNVD-2021-15560)

Ltd. was founded in 2000 in Shanghai, for the national high-tech enterprises, is China's professional foreign trade enterprise management software provider, foreign trade industry solutions provider. Ltd. VUMA cloud SQL injection vulnerability, attackers can use the vulnerability to obtain databa...

SQL Injection Vulnerability in xiycms Frontend

xiycms is an enterprise content management system developed based on thinkphp6. A SQL injection vulnerability exists in the frontend of xiycms. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in pr***.aspx page of website building system of Hangzhou Orange Promise Technology Co.

Hangzhou Orange Promise Technology Co., Ltd. is a company focusing on Internet branding and online marketing, specializing in the following areas: branded website customization, WeChat application development, e-commerce platform development, mobile application development. There is a SQL injecti...

Yccms SQL注入漏洞

Yccms is a Php-based lightweight CMS builder from the Yccms team. YCCMS 3.3 has a SQL injection vulnerability that can be exploited by attackers to execute SQL statements to obtain database information...

SQL injection vulnerability in ar***.php page of Baoding Interactive Enterprise Marketing Planning Co.

Baoding Interactive Enterprise Marketing Planning Co. Baoding Interactive Enterprise Marketing Planning Co., Ltd. website building system ar.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

SQL injection vulnerability in the ar***.php page of the website building system of Yunnan Huaji Youxiang Network Technology Co.

Yunnan Huaji Youxiang Network Technology Co., Ltd. is a company that provides intellectual property rights and Internet services to its clients. Yunnan Huayi Youxiang Network Technology Co., Ltd. website building system ar.php page SQL injection vulnerability, attackers can use the vulnerability ...

SQL injection vulnerability in the pd***_li***.php page of the website building system of Yunnan Huaji Youxiang Network Technology Co.

Yunnan Huaji Youxiang Network Technology Co., Ltd. is a company that provides intellectual property rights and Internet services to its clients. Yunnan Huaji Youxiang Network Technology Co., Ltd. building system pdli.php page SQL injection vulnerability, attackers can use the vulnerability to...

Wenzhou Qiaoyu Technology Co., Ltd. station-building system pr***_se***.asp page SQL injection vulnerability

Wenzhou Qiaoyu Technology Co., Ltd. is an enterprise focusing on network marketing integration services. Wenzhou Qiaoyu Technology Co., Ltd. station-building system prse.asp page there is a SQL injection vulnerability, the attacker can use the vulnerability to obtain sensitive information in the...

SQL Injection Vulnerability in Website Building System of Shenyang Pangu Network Technology Co. Ltd (CNVD-2021-12712)

Pangu provides enterprises with intelligent integrated marketing services based on Baidu's commercial product system, covering brand marketing, effect marketing, digital marketing, media marketing, content marketing, public relations marketing, and event execution. Shenyang Pangu Network Technolo...

SQL Injection Vulnerability in Chengdu Timeshift Technology Co.

Chengdu Times Huichuang Technology Co., Ltd. is an information technology service-oriented enterprise integrating Internet software research and development, website operation, e-commerce and IT services. There is a SQL injection vulnerability in the website builder system of Chengdu Timeshift...