Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2018-22525 )

Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A SQL injection vulnerability exists in Zoho ManageEngine OpManager version 123222 prior to 12.3, which can be exploited by an attacker to obtain sensitive information about a database...

SQL Injection Vulnerability in LaySNS In***.php File

LaySNS Light Community is a comprehensive website system based on ThinkPHP5+LayUI that integrates content publishing and community exchange. A SQL injection vulnerability exists in the LaySNS In.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in My***.php File of YunYu CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the My.php file of YUNUCMS enterprise website management system. An attacker can exploit the...

SQL Injection Vulnerability in LaySNS v2.4

LaySNS Light Community is a comprehensive website system based on ThinkPHP5+LayUI that integrates content publishing and community exchange. LaySNS v2.4 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in UsualToolCMS a_a***.php File

UsualToolCMS is an enterprise-level web content management system written in PHP+MYSQL that uses template separation technology to support the creation of multiple types of sites. A SQL injection vulnerability exists in the UsualToolCMS aa.php file. An attacker can exploit the vulnerability to...

SQL injection vulnerability in DedeCMS co***.php file

Dream Content Management System DedeCMS is a PHP open source website management system. A SQL injection vulnerability exists in the DedeCMS co.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in OURPHP ou***.php File

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. A SQL injection vulnerability exists in the OURPHP ou.php file. Attackers can use the vulnerability to obtain sensitive information in the database...

Quick Count 'txtInstID' Parameter SQL Injection Vulnerability

Quickcount is a way to measure audience response on your own web host without having to prepare special slides or other settings. A SQL injection vulnerability exists in the 'txtInstID' parameter of Quick Count version 2.0, which can be exploited by an attacker to gain access to sensitive databas...

SQL Injection Vulnerability in ZZCMS fu***.php Page

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the ZZCMS fu.php page. An attacker can exploit the vulnerability to obtain sensitive information from the database...

phptpoint Hospital Management System 1.0 - user SQL injection

phptpoint Hospital Management System 1.0 - user SQL injection Exploit Title: phptpoint Hospital Management System 1.0 - 'user' SQL injection Date: 2018-10-24 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.phptpoint.com/ Software Link: Version: 1...

phptpoint Hospital Management System 1.0 - 'user' SQL injection

Exploit Title: phptpoint Hospital Management System 1.0 - 'user' SQL injection Date: 2018-10-24 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.phptpoint.com/ Software Link: Version: 1 Tested on: WAMP windows 10 x64 CVE: unknown Description: Phptpoin...

SQL Injection Vulnerability in BageCms in***.php File

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms in.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Ma***.php File of YunYu CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the Ma.php file of YUNUCMS enterprise website management system. An attacker can exploit the...

SQL Injection Vulnerability in UsualToolCMS v8.0Release

UsualToolCMS UTCMS is an enterprise-level web content management system written in PHP+MYSQL that uses template separation technology to support the creation of multiple types of sites. UsualToolCMS v8.0Release suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability ...

SQL injection vulnerability in the front-end me***.php page of S-CMS school website builder system

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the front-end me.php page of S-CMS School Building System. Attackers can use the vulnerability...

SQL Injection Vulnerability in YUNUCMS Ma***.php File

YUNUCMS Enterprise Website Management System YUNUCMS is a professional marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the YUNUCMS Ma.php file. An attacker can exploit this vulnerability to obtain sensitive database...

SQL injection vulnerability in YUNUCMS Ma***.php file (CNVD-2018-21953)

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the YUNUCMS Ma.php file. An attacker can exploit this vulnerability to obtain sensitive database...

SQL injection vulnerability in cl***.php file in ZZCMS 8.3 version

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the cl.php file in ZZCMS version 8.3. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in MetInfo

MetInfo is a content management system developed using PHP and Mysql. MetInfo suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

DonLinkage SQL Injection Vulnerability

DonLinkage is a locator program. A SQL injection vulnerability exists in the /pages/proxy/php.php and /pages/proxy/add.php files in DonLinkage version 6.6.8. A remote attacker can exploit this vulnerability with specially crafted input to obtain information from the database...