DBShop e-commerce system has SQL injection vulnerability in the frontend

DBShop based on PHP official ZendFramework 2 framework for the development of a new generation of e-commerce system. A SQL injection vulnerability exists in the frontend of DBShop e-commerce system. An attacker can exploit the vulnerability to obtain database information...

Multiple SQL Injection Vulnerabilities in xycms 1.4 Version

Jiangsu Xinyue Technology focus on enterprise website construction services, China's excellent platform R & D and service providers, to provide enterprise website building system, station software; for domestic and foreign enterprises to provide a mature and reliable website construction and...

XYCMS b_title parameter has SQL injection vulnerability

XYCMS was formerly known as Nanjing XYCMS Enterprise Station Building System, which is a commercial station building system based on ASP development. A SQL injection vulnerability exists in the XYCMS btitle parameter. An attacker can exploit the vulnerability to obtain sensitive database...

SQL Injection Vulnerability in List_ask Parameter of SMiCMS Government Website System

State Micro CMS is one of the mainstream CMS systems in China, and is also an open source platform provider in the field of PHP in Southern China. State Micro CMS government website system listask parameter SQL injection vulnerability , the vulnerability is due to the failure of user-submitted da...

SQL Injection Vulnerability in List_content Parameter of SMiCMS Government Website System

State Micro CMS for one of the country's most mainstream CMS systems, but also in southern China in the field of PHP open source platform provider. State Micro CMS government website system listcontent parameter SQL injection vulnerability , the vulnerability is due to the failure of the user to...

SQL Injection Vulnerability in List_picture Parameter of SMiCMS Government Website System

State Micro CMS is one of the mainstream CMS systems in China, and is also the open source platform provider in the field of PHP in Southern China. State Micro CMS government website system listpicture parameter SQL injection vulnerability, the vulnerability is due to the failure of the user to...

SQL Injection Vulnerability in WinCMS id Parameter of Enterprise Business Technology

WinCMS is a website management system managed and developed by Tianjin Qishang Huichuang Technology Co. A SQL injection vulnerability exists in the WinCMS id parameter. The vulnerability allows attackers to exploit the vulnerability to obtain sensitive information in the database...

ZZCMS V8.0 SQL Injection Vulnerability in Multiple Parameters

ZZCMS is an enterprise website builder. ZZCMS V8.0 suffers from a SQL injection vulnerability, which allows attackers to exploit the vulnerability to obtain sensitive information from the database. The injection parameters include the following: zs/zs.php file 'pxzs' function;...

SQL Injection Vulnerability in CUID Parameter of Hikvision's In-vehicle Remote Monitoring System AddUser.php File

Hikvision vehicle remote monitoring system is a set of vehicle video networking monitoring platform software. A SQL injection vulnerability exists in the parameter CUID of the AddUser.php file in Hikvision Vehicle Remote Monitoring System. It allows attackers to exploit the vulnerability to obtai...

SQL Injection Vulnerability in Keyword Parameter of School Website Management System

The SchoolWise School Website Management System is a content management system for primary and secondary school websites. A SQL injection vulnerability exists in the Keyword parameter of the School Worry-Free School Website Management System. It allows attackers to exploit the vulnerability to...

SQL Injection Vulnerability in the order_turn parameter of the UWA 2.X Universal Site Builder System

UWA 2.X Universal Website AsThis is a universal website building system developed by AsThis based on PHP and MySQL. UWA 2.X Universal Website AsThis suffers from a SQL injection vulnerability. The lack of filtering of the 'orderturn' parameter allows an attacker to exploit the vulnerability to...

Social Directory Script SQL Injection Vulnerability

Social Directory Script is a website that helps users to quickly build a social directory, where they can create a list of their favorite websites and add their favorite websites to the list. Social Directory Script 2.0 suffers from SQL injection in several parameters such as search and category...

Ke361 V1.0.706 SQL Injection Vulnerability in id Parameter of 'detail()' Function

Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modularity, drive and...

SQL Injection Vulnerability in UReader Digital Library System info.php Page

UReader Digital Library UReader Digital Library is a comprehensive platform for providing e-books in original foreign languages. A SQL injection vulnerability exists in the UReader Digital Library system info.php page. The vulnerability is caused by not filtering the 'resid' parameter effectively...

YXcmsApp V1.4.3 SQL Injection Vulnerability in Background Deletion of Guestbooks

Yxcms is an enterprise building system based on PHP and mysql technology. A SQL injection vulnerability exists in YXcmsApp V1.4.3 at the background deletion of guestbooks. The lack of filtering of the 'delid' parameter allows attackers to exploit the vulnerability to obtain sensitive database...

WordPress NextGEN Gallery suffers from a SQL Injection Vulnerability

NextGEN Gallery is a WordPress gallery plugin. A SQL injection vulnerability exists in NextGEN Gallery 2.1.77 and earlier versions, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in zabbix 'profileldx2' parameter

Zabbix is a WEB-based interface to provide distributed system monitoring and network monitoring capabilities of enterprise-class open source solutions . A large number of domestic zabbix IPs are vulnerable to SQL injection. The lack of filtering of the 'profileldx2' parameter allows attackers to...

SQL injection vulnerability in getip function of mallbuilder foreground convertip.php file

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. The mallbuilder front-end getip function suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Cookie injection vulnerability in mallbuilder frontend v7.3.4 home.php file

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. mallbuilder v7.3.4 has a SQL injection vulnerability in the foreground home.php, which allows attackers to obtain sensitive database information using common SQL injection tools...

ZYCHCMS 'Fieldid' Parameter Has SQL Injection Vulnerability

ZYCHCMS is an enterprise website management system. ZYCHCMS v06 Build161216 suffers from a SQL injection vulnerability. The lack of filtering of the 'Fieldid' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...