SQL injection vulnerability in DayuCMS backend content.inc.php page

DayuCMS is a marketing-centered CMS system that incorporates search engine algorithms to facilitate businesses and individual webmasters. A SQL injection vulnerability exists in the content.inc.php page of DayuCMS backend. An attacker can exploit the vulnerability to obtain sensitive database...

SQL Injection Vulnerability in MacCMS Version 8.x

MacCMS program is a fast shadow video building system that runs on PHP+MYSQL environment. A frontend SQL injection vulnerability exists in MacCMS version 8.x 2017-06-20, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in UQCMS Cloud Business B2B2C Multi-store System

UQCMS cloud business system is a B2B2C e-commerce software that the program uses PHP+MYSQL and the template uses smarty template. A SQL injection vulnerability exists in UQCMS Cloud Business B2B2C Multi-Store System due to the program failing to adequately filter user-supplied input. An attacker...

Ecava IntegraXor SQL Injection Vulnerability (CNVD-2017-37694)

Ecava IntegraXor is a toolset for creating and running human-machine interfaces for Web-based SCADA systems. Ecava IntegraXor suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from a database...

Apple Web Design's iWeb 5.1 Responsive Website System Has SQL Injection Vulnerability

Apple Web Design is a web marketing company that integrates web marketing, keyword marketing and other web marketing companies. An SQL injection vulnerability exists in Apple Web Design's iWeb 5.1 responsive website system. The vulnerability is caused due to the system failing to effectively filt...

Techno - Portfolio Management Panel SQL Injection Vulnerability

Techno - Portfolio Management Panel is a set of portfolio management panel scripts. A SQL injection vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. A remote attacker can exploit the vulnerability by sending the 's' parameter to the panel/search.php fil...

SQL Injection Vulnerability in Harbin Hongfu Technology Development Co.

Harbin Hongfu Technology Development Co., Ltd Hongfu, referred to as Hongfu, is a marketing Internet enterprise specializing in Internet technology services, development and application. Harbin Hongfu Technology Development Co., Ltd. website construction system has a SQL injection vulnerability,...

SQL Injection Vulnerability in Website Building System of Suzhou Leyi Network Technology Co.

Suzhou Leyi Network Technology Co., Ltd. is a network company specializing in enterprise website construction and e-commerce services, providing network promotion and marketing in one of the professional services. Suzhou Leyi Network Technology Co., Ltd. website building system SQL injection...

Dongguan Golden Drum Network Technology Co., Ltd. website construction system has SQL injection vulnerabilities

Dongguan Golden Drum Network Technology Co., Ltd. is a network company, specializing in the field of website design and Internet marketing. Dongguan Golden Drum Network Technology Co., Ltd. website construction system has a SQL injection vulnerability, attackers can use the vulnerability to obtai...

ShyPost Enterprise Management System suffers from SQL Injection Vulnerability

ShyPost Enterprise Management System is a set of intelligent ASP-based website building software. ShyPost Enterprise Management System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Sanjin Web Site Construction System

Guangzhou Sanjin Network Technology Co., Ltd. is an Internet application service provider, providing international, professional, personalized and branded e-commerce solutions for Chinese enterprises. There is a SQL injection vulnerability in Sanjin Network's website construction system, which ca...

SQL Injection Vulnerability in JYmusic ArticleController.php Page

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the JYmusic ArticleController.php page. Allow attackers to exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in JYmusic AlbumController.php Page

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the JYmusic AlbumController.php page. Allow attackers to exploit the vulnerability to obtain sensitive database information...

CVE-2017-2715

The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to...

Design/Logic Flaw

The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to...

CVE-2017-2715

The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to...

SQL Injection Vulnerability in Multiple Evaluation System

Xiamen Phoenix Chuangyi Software Co., Ltd. is mainly committed to the Internet three-dimensional dynamic interactive software platform research, development, application and promotion. There is a SQL injection vulnerability in the Multi-dimensional Evaluation System. The vulnerability allows an...

SQL Injection Vulnerability in Ming Enterprise Technology Website Construction System

Shanghai Ming Enterprise Information Technology Co., Ltd Ming Enterprise Technology is engaged in website construction, network marketing, domain name hosting and Internet application development. A SQL injection vulnerability exists in Ming Enterprise's website construction system. The...

CVE-2017-15864

In the Agent Frontend in Open Ticket Request System OTRS 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password...

EasySNS Minimalist Community callback_pingfen method and checkusergroupinfo method have SQL injection vulnerabilities

EasySNS Minimalist Community Group Edition is a new database architecture and program structure to form an interactive community with a group as the basic unit. EasySNS Minimalist Community callbackpingfen method and checkusergroupinfo method have SQL injection vulnerability, the vulnerability is...