CVE-2017-10937

SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

CVE-2018-14579

GolemCMS through 2008-12-24, if the install/ directory remains active after an installation, allows remote attackers to execute arbitrary PHP code by inserting this code into the "Database Information" "Table prefix" form field, or obtain sensitive information via a direct request for...

YUNUCMS v1.1.1 D***.php page has SQL injection vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS v1.1.1 version of the D.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

SQL Injection Vulnerability in Shenzhen PointClear Information Technology PointClear MIS Management Information System

PointClear MIS Management Information System is an enterprise-level instant messaging platform launched by PointClear. Shenzhen PointClear Information Technology PointClear MIS Management Information System suffers from SQL injection vulnerability, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in South Data's Website Building System

Southern Data, is a high-tech enterprise mainly engaged in the development, sales and service of network software and other businesses. Southern Data's website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

NUCMS V1.1 SQL Injection Vulnerability in Backend

NUCMS content management system is an open source website management system. NUCMS V1.1 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in ESPCMS Enterprise Website Management System V6.7.17.08.07 sh***.php Page

ESPCMS enterprise website management system is based on LAMP development and construction of enterprise website management system. ESSENCE ESPCMS Enterprise Website Management System V6.7.17.08.07 SQL injection vulnerability exists in the sh.php page. An attacker can exploit the vulnerability to...

SQL Injection Vulnerability in PHPMyWind

HPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . There is a SQL injection vulnerability in PHPMyWind, which can be exploited by attackers to obtain sensitive information in the database, resulting in information leakage and operational security risks...

Multiple SQL Injection Vulnerabilities in WordPress WP Google Map Plugin

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Multiple SQL injection vulnerabilities exist in the WordPress WP Google Map plugin, which can be exploited by attackers to...

WordPress Ultimate Form Builder Lite Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Ultimate Form Builder Lite plugin, which can be exploited by an attacke...

SQL Injection Vulnerability in Guangzhou Benying Computer Technology Co.

Founded in 2007, Guangzhou Benying Computer Technology Co., Ltd. is a leading mobile Internet technology service provider in Guangzhou. Committed to building Internet + business ecology, especially focusing on the field of mobile Internet, providing APP development, system development, small...

NewsBee CMS 'home-text-edit.php' SQL Injection Vulnerability (CNVD-2018-18806)

NewsBee CMS is a news website CMS Content Management System. A SQL injection vulnerability exists in NewsBee CMS 'home-text-edit.php'. An attacker can exploit the vulnerability to obtain sensitive database information...

Zechat has multiple vulnerabilities

Zechat is a PHP-based online chat application script . Zechat suffers from SQL injection and cross-site request forgery vulnerabilities. An attacker can exploit the vulnerabilities to obtain sensitive information about the database; change the user's information...

PbootCMS 'scode' Parameter SQL Injection Vulnerability

PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. A SQL injection vulnerability exists in PbootCMS version 1.0.9. A remote attacker can exploit this vulnerability by sending the 'scode' parameter to the...

SQL Injection Vulnerability in SMiCMS Government Website System v201803224 Version

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS government website system v201803224 version of the existence of SQL injection vulnerability , attackers can exploit the...

CVE-2018-11369

An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserController.php scode parameter...

SQL Injection Vulnerability in DedeCMS V5.7-SP2 Version

Dream Content Management System DedeCMS is a PHP open source website management system. SQL injection vulnerability exists in DedeCMS V5.7-SP2 version, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Jinbao Technology's CMS Website Building System

Shanghai Jinbao Network Technology Co., Ltd. is a set of website construction, SEO optimization, network promotion, Shanghai website production, Shanghai SEO optimization, Shanghai network optimization, and many other network services as one of the integrated service-oriented professional network...