SQL injection vulnerability in the show.html/show.php page of the website building system of Sichuan Horizontal World Technology Co.

Ltd. is an Internet + solution provider and execution service provider. A SQL injection vulnerability exists in the show.html/show.php page of Sichuan Horizontal World Technology Co. The vulnerability is due to the system id parameter does not filter the data submitted by the user, remote attacke...

SQL Injection Vulnerability in about.php Page of HopYoung Website Builder System

The Hop-Up Network Building System is a website building system. A SQL injection vulnerability exists in the about.php page of the HopYoung website builder system, which can be exploited by attackers to obtain sensitive information from the database...

Ocean CMS \admin\admin_collent_news.php page rColumn parameter SQL injection vulnerability

Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS \admin\admincollentnews.php page rColumn parameter SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive database information...

The Next Generation Of Genealogy Sitebuilding SQL Injection

========================================================================================== The Next Generation of Genealogy Sitebuilding SQL Injection Vulnerability ==========================================================================================...

TUTUCMS system admin\Article.php page order parameter has SQL injection vulnerability

TUTUCMS is a set of CMS management program focusing on the development of image-based websites, using PHP+MYSQL architecture, which can run on different platforms Windows, Linux, Unix. A SQL injection vulnerability exists in the order parameter of the admin\Article.php page of the TUTUCMS system...

PHPSHE open source mall system bankname parameter SQL injection vulnerability

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system bankname parameters...

SQL Injection Vulnerability in Mythos™ Documentation Management System

Mythos™ Document Management System is a library management reference platform with a professional database as the backend data storage on Windows or UNIX/Linux platform. A SQL injection vulnerability exists in Mythic™ Document Management System, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in ViewOpern.aspx Page ID Parameter of Jinpan Non-Book Data Management System

Jinpan non-book information management system software is a set of B/S and C/S combined management system for the current common format files launched by Beijing Jinpan Tu Software Technology Co., Ltd. mainly provides readers with non-book resources remote call service, including: with the book...

IBM Sterling B2B Integrator Standard Edition SQL Injection Vulnerability

IBM Sterling B2B Integrator Standard Edition is the standard edition of a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A SQL injection...

SQL Injection Vulnerability in UCMS 'ajax.php' File

UCMS is a simple open source content management system. A SQL injection vulnerability exists in the UCMS 'ajax.php' file, which can be exploited by attackers to obtain sensitive information about the database...

Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2017-20513)

Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Analysis Services in Microsoft SQL Server. An attacker c...

NexusPHP v1.5 cheaterbox.php file has SQL injection vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. NexusPHP v1.5 cheaterbox.php file delcheater parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

DzzOffice v1.3.1 SQL Injection Vulnerability in Frontend

DzzOffice is a cloud storage management tool , based on the free open source release , can be used as a personal network disk , team , enterprise network disk for use . A SQL injection vulnerability exists in DzzOffice v1.3.1 due to the program failing to strictly filter the keyword parameter...

SQL injection vulnerability of menuqx[1][6] parameter on roles.control.mydecms.php page of Xiancheng website builder system

Xiancheng building system is a set of PHP + mysql architecture with free open source article management system program. Xiancheng website builder system role.control.mydecms.php page menuqx16 parameter SQL injection vulnerability. Due to the system failing to effectively filter user-submitted dat...

Finecms foreground catid parameter has SQL injection vulnerability

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. An SQL injection vulnerability exists in the frontend catid parameter of finecms. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System v2.1.6 [CNVD-2017-20678]

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall System v2.1.6 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in finecms Frontend Field Parameters

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A SQL injection vulnerability exists in the frontend field parameter of finecms. An attacker can exploit this vulnerability to obtain database information...

iwebsns open source SNS system order_by parameter has a SQL injection vulnerability

iWebSNS is a large-scale high concurrency and high load of open source SNS software , based on iwebSuperInteraction iweb SI for short framework development . iwebsns open source SNS system orderby parameter has a SQL injection vulnerability . Attackers can use this vulnerability to obtain databas...

SQL Injection Vulnerability in admin_book.php Backend of BEESCMS Enterprise Website Management Department

BEESCMS is an enterprise website management system. A SQL injection vulnerability exists in the adminbook.php backend of the BEESCMS enterprise website management system. An attacker can exploit this vulnerability to obtain database information...

Henan Xuecheng Software Website Group Content Management System Exists SQL Injection Vulnerability

Henan Xuecheng Software Co., Ltd. website group content management system is a website building system. A SQL injection vulnerability exists in the content management system of Henan Xuecheng Software Co. The vulnerability exists in /cms/template/InfoShowDefault.js. An attacker can exploit the...