PHPback 'orderby' parameter SQL injection vulnerability

PHPback is an open source web application feedback system that provides users with feedback on issues and suggestions to help improve the site. A SQL injection vulnerability exists in PHPback version 1.3.0. An attacker can exploit the vulnerability by constructing a SQL statement containing the...

53快服平台某漏洞涉及760w用户信息+百万聊天工人信息+消息

简要描述： RT 详细说明： post注入语法：sqlmap.py -r 6.txt -D talk --count --tables 延迟注入慢的不行跑了25小时左右 ======================数据包========================= POST /lword.php HTTP/1.1 Host: www5.53kf.com Proxy-Connection: keep-alive Content-Length: 364 Origin: http://www5.53kf.com User-Agent: Mozilla/5.0 Windows NT 6.1...

Multiple SQL Injection Vulnerabilities in Seacms

SeaCms is a set of applications for building online movies with PHP+MYSQL architecture. Seacms has multiple SQL injection vulnerabilities. Allow attackers to exploit the vulnerabilities to obtain sensitive database information...

weiphp /Application/Admin/Controller/PublicController.class.php Login SQL Injection Vulnerability

weiphp is an open source, efficient, simple microsoft development platform. The weiphp /Application/Admin/Controller/PublicController.class.php login is vulnerable to SQL injection. Allow attackers to exploit the vulnerability to obtain sensitive database information...

Vwins SQL Injection Vulnerability

vwins is an open source WeChat public , WeChat enterprise and pay as you go service window management system . Vwins has a SQL injection vulnerability, attackers can use the vulnerability to obtain database information, constituting a sensitive information leakage...

Flying Fox Link File System SQL Injection Vulnerability

Flying Fox Link File System is a file management system. Flying Fox Link File System suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain database information, resulting in the disclosure of sensitive information...

SQL injection vulnerability in the 'id' parameter of the fixed asset management system of higher education institutions at Shandong Guozi Software Co.

The Fixed Asset Management System FAMS for Higher Education is a web-based management system that can run on a campus network or the Internet. A SQL injection vulnerability exists in the Fixed Asset Management System for Higher Education Schools of Shandong Guozi Software Co. The lack of filterin...

PyScan-Scanner - Vulnerability Scanner With Custom Payload

REQUIRE urllib2 BeautifulSoup requests START Change database information $bdd = new PDO'mysql:host=localhost;dbname=pyscan', 'user', 'password'; Update a Python gate panelurl = "http://localhost/pyscan/" gatescraper = "cmd/gate.php" gatescanner = "cmd/scan.php" gatevuln = "cmd/vuln.php" gatepaylo...

XEDA CTOP Collaboration Office OA System SQL Injection Vulnerability

A SQL injection vulnerability exists in the XEDA CTOP Collaborative Office OA system. Allows an attacker to obtain sensitive database information...

SQL Injection Vulnerability in the Teaching System of Beijing Oriental Centaline Education Technology Co.

Oriental Centrum is a developer, supplier and solution provider in the field of multimedia display and interactive teaching applications. A SQL injection vulnerability exists in the teaching system of Beijing Oriental Centrum Education Technology Co. Ltd. where an attacker can obtain database...

Multiple Vulnerabilities in e-cology, Panmicro's Collaborative Application Management Platform

Collaborative management application platform e-cology is a set of collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management and...

Joomla SQL Injection Vulnerability (CNVD-2015-06805)

Joomla is a content management system, developed with PHP + MySQL database, running on Linux, Windows, MacOSX, Solaris and many other platforms. Joomla has been disclosed to have a SQL injection vulnerability, the comprehensive use of the vulnerability, attackers can obtain the website database...

Joomla SQL Injection Vulnerability (CNVD-2015-06803)

Joomla is a content management system, developed with PHP + MySQL database, running on Linux, Windows, MacOSX, Solaris and many other platforms. Joomla has been disclosed to have a SQL injection vulnerability, the comprehensive use of the vulnerability, attackers can obtain the website database...

SQL Injection Vulnerability in the Hot.aspx Page Mid2 Parameter of Shanghai Caixa University Science and Technology Development Corporation's Kefa Online Query System

Shanghai Cai Da Science and Technology Development Corporation Kofa online query system is a comprehensive query system for financial information. The product has a SQL injection vulnerability, the vulnerability URL is: /hot.aspx?mid1=&mid2=&webid=, the vulnerability parameter is mid2, the attack...

SQL Injection Vulnerability in Xi'an Bureau Veritas Standard Edition Transaction Tenure Management System

Xi'an BitTorrent Software Co., Ltd. is a company that researches the business of government real estate management, and the standard version of the Transaction Tenure Management System is one of the management systems of the company. A SQL injection vulnerability exists in the standard version of...

SQL Injection Vulnerability in Travel E-commerce Platform Usid Parameter of Shenzhen Dingyue.

The tourism e-commerce platform is also a platform for a business system that uses electronic means to operate the tourism industry and its distribution system, based on a network as the main body, a tourism information base and an electronic business bank. SQL injection vulnerability exists in t...

Arbitrary File Upload Vulnerability in Panavision OA System

Panavision OA Office System is a coordination office software. A SQL injection vulnerability exists in Panmicro OA Office System, which can be exploited by an attacker to obtain sensitive information from a website database...

SQL Injection Vulnerability in Shenzhen Siliconware Sewise Live Server

SEWISE is a streaming media cloud computing company engaged in streaming media encoding, distribution and storage of audio and video. sewise live streaming server is a product of this company. A SQL injection vulnerability exists in SEWISE live server. An attacker can exploit the vulnerability to...

Directory Traversal Vulnerability in the vnet web management system of Zenith

COSHIDA VNet6 Professional Reference Station Receiver is one of COSHIDA's new VNet series of measurement systems, and it is also a professional reference station receiver specially designed for reference station applications. A directory traversal vulnerability exists in the COSHIDA vnet web...

Command Execution Vulnerability in the Cina vnet Web Management System

COSHIDA VNet6 Professional Reference Station Receiver is one of COSHIDA's new VNet series of measurement systems, and it is also a professional reference station receiver specially designed for reference station applications. A command execution vulnerability exists in the COSHIDA vnet web...