Multiple IBM DB2 Product Information Disclosure Vulnerabilities

IBM DB2 is a relational database management system from IBM in the United States. An information disclosure vulnerability exists in IBM DB2 versions 10.1, 10.5, and 11.1 based on AIX, Linux, HP, Solaris, or Windows platforms. An attacker could exploit this vulnerability to obtain sensitive...

WordPress Sites Exposed by Vulnerable Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Sites Exposed by Vulnerable plugin, which allows attackers to exploit t...

WordPress Plugin NextGEN Gallery SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin NextGEN Gallery. It allows unauthenticated users to obtain...

SQL Injection Vulnerability in 'id' Parameter of Single Point CRM System

Single point CRM system is a single point of technology development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies , fixed...

SQL Injection Vulnerability in Ocean CMS v_field Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admindatarelate.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'vfield' parameter allows attackers to exploit the vulnerability to obtain sensitive database informatio...

SQL Injection Vulnerability in Ocean CMS uesMode Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admincollect.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'uesMode' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about t...

SQL Injection Vulnerability in Ocean CMS v_name Parameter

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the adminajax.php page of Ocean CMS 6.46 utf-8 official version. The lack of filtering of the 'vname' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Ocean CMS ckey Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the adminpay.php page of the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'ckey' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the...

YXcms photoController.php SQL Injection Vulnerability

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. A SQL injection vulnerability exists in YXcms photoController.php. Allow attackers to exploit the vulnerability to obtain sensitive database information...

YXcms newsController.php SQL Injection Vulnerability

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. A SQL injection vulnerability exists in YXcms newsController.php. Allow attackers to exploit the vulnerability to obtain sensitive database information...

Multi-meter (DuomiCms) film and television management system v_name parameters exist SQL injection vulnerability

Duomi DuomiCms film and television management system is a set of specialized video on demand system. A SQL injection vulnerability exists in DuomiCms. The lack of filtering of the 'vname' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

CVE-2016-9410

MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates...

Information disclosure

MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates...

CVE-2016-9410

MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates...

SQL Injection Vulnerability in the 'id[]' Parameter of Business Easy CMS

Shangyi CMS, or 31cms for short, is a drop-in microsoft public platform management system. A SQL injection vulnerability exists in Business Easy CMS. The lack of filtering of the 'id' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...

SQL Injection Vulnerability in YunGouCMS shopid

YunGouCMS is a website builder provided by Taurus Networks for the cloud purchasing model. YunGouCMS suffers from a SQL injection vulnerability. The lack of filtering of user input in the shopid parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in YzmCMS /member/account.php Page

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS /member/account.php page has a SQL injection vulnerability. Because the /member/account.php page does not filter parameters, an...

Joomla com_blog_calendar SQL injection vulnerability

A SQL Injection Vulnerability has been discovered in the Joomla Module called comblogcalendar. The Vulnerability is located in the index.php?option=comblogcalendar&modid=xxx Parameter. Attackers are able to execute own SQL commands by usage of a GET Method Request with manipulated modid Value...

SQL Injection Vulnerability in YzmCMS email.php

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A SQL injection vulnerability exists in YzmCMS email.php. An attacker can exploit the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Mito MetInfo V5.3 Backend

MetInfo is an enterprise website management system with PHP Mysql architecture. A SQL injection vulnerability exists in the backend of MetInfo V5.3. Due to the lack of filtering of the class1 parameter, which allows attackers to exploit the vulnerability to obtain sensitive database information...