Override Access Vulnerability in Panavision E-Mobile

Panavision E-Mobile is a mobile office platform. An override access vulnerability exists in Panmicro E-Mobile. An attacker can use the vulnerability to modify the platform authentication code, obtain database information, lock the OA system and other operations...

Website Security Dog (Apache Edition) V4.0 suffers from SQL injection vulnerability (CNVD-2018-02087)

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition V4.0 suffers from a SQL injection vulnerability. Allows attackers to exploit the...

SQL injection vulnerability in the pro_content.php page of Xuchang Chunqiu Network Technology Co.

Xuchang Chunqiu Network Technology Co., Ltd. is a one-stop IT service company dedicated to website construction, network promotion, keyword optimization, 400 phone, talent network, software development and application, service outsourcing and many other businesses in one. A SQL injection...

SQL Injection Vulnerability in phpaaCMS article.add.php File

phpaaCMS is a simple article management system. A SQL injection vulnerability exists in the phpaaCMS article.add.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

Inner Mongolia Baijiaxin Technology Co., Ltd. network station building system multiple parameters exist SQL injection vulnerability

Inner Mongolia Baijiaxin Technology Co., Ltd. is an information technology service company integrating website construction, software research and development, software implementation, system integration, network engineering, information technology consulting and IT outsourcing services. There is...

SQL Injection Vulnerability in FiyoCMS status.php File

FiyoCMS is a content management system CMS for creating CMS templates. A SQL injection vulnerability exists in the FiyoCMS status.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in the delProgram Method of the ChaseGrid WeChat Small Program App Store System

Chasing the grid WeChat small program application store system is a free open source small program store system developed by Chasing the grid technology. The delProgram method of the ChaseGrid WeChat applet store system suffers from a SQL injection vulnerability. Attackers can use the vulnerabili...

SQL Injection Vulnerability in CMS ConfigController.class.php Page

SmallBuild CMS is a website management backend based on the OneThink open source framework. A SQL injection vulnerability exists in the PawnBuilder CMS ConfigController.class.php page. An attacker can exploit the vulnerability to obtain sensitive information about the database...

SQL injection vulnerability in DayuCMS backend content.inc.php page

DayuCMS is a marketing-centered CMS system that incorporates search engine algorithms to facilitate businesses and individual webmasters. A SQL injection vulnerability exists in the content.inc.php page of DayuCMS backend. An attacker can exploit the vulnerability to obtain sensitive database...

Dedecms V5.7 Backend Co_add.php File Exists SQL Injection Vulnerability

DedeCMS is a PHP open source website management system. A SQL injection vulnerability exists in the Coadd.php file in the backend of Dedecms V5.7. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in MacCMS Version 8.x

MacCMS program is a fast shadow video building system that runs on PHP+MYSQL environment. A frontend SQL injection vulnerability exists in MacCMS version 8.x 2017-06-20, which can be exploited by attackers to obtain sensitive database information...

Ecava IntegraXor SQL Injection Vulnerability (CNVD-2017-37694)

Ecava IntegraXor is a toolset for creating and running human-machine interfaces for Web-based SCADA systems. Ecava IntegraXor suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from a database...

SQL Injection Vulnerability in UQCMS Cloud Business B2B2C Multi-store System

UQCMS cloud business system is a B2B2C e-commerce software that the program uses PHP+MYSQL and the template uses smarty template. A SQL injection vulnerability exists in UQCMS Cloud Business B2B2C Multi-Store System due to the program failing to adequately filter user-supplied input. An attacker...

Techno - Portfolio Management Panel SQL Injection Vulnerability

Techno - Portfolio Management Panel is a set of portfolio management panel scripts. A SQL injection vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. A remote attacker can exploit the vulnerability by sending the 's' parameter to the panel/search.php fil...

Apple Web Design's iWeb 5.1 Responsive Website System Has SQL Injection Vulnerability

Apple Web Design is a web marketing company that integrates web marketing, keyword marketing and other web marketing companies. An SQL injection vulnerability exists in Apple Web Design's iWeb 5.1 responsive website system. The vulnerability is caused due to the system failing to effectively filt...

SQL Injection Vulnerability in Harbin Hongfu Technology Development Co.

Harbin Hongfu Technology Development Co., Ltd Hongfu, referred to as Hongfu, is a marketing Internet enterprise specializing in Internet technology services, development and application. Harbin Hongfu Technology Development Co., Ltd. website construction system has a SQL injection vulnerability,...

SQL Injection Vulnerability in Website Building System of Suzhou Leyi Network Technology Co.

Suzhou Leyi Network Technology Co., Ltd. is a network company specializing in enterprise website construction and e-commerce services, providing network promotion and marketing in one of the professional services. Suzhou Leyi Network Technology Co., Ltd. website building system SQL injection...

Dongguan Golden Drum Network Technology Co., Ltd. website construction system has SQL injection vulnerabilities

Dongguan Golden Drum Network Technology Co., Ltd. is a network company, specializing in the field of website design and Internet marketing. Dongguan Golden Drum Network Technology Co., Ltd. website construction system has a SQL injection vulnerability, attackers can use the vulnerability to obtai...

ShyPost Enterprise Management System suffers from SQL Injection Vulnerability

ShyPost Enterprise Management System is a set of intelligent ASP-based website building software. ShyPost Enterprise Management System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Sanjin Web Site Construction System

Guangzhou Sanjin Network Technology Co., Ltd. is an Internet application service provider, providing international, professional, personalized and branded e-commerce solutions for Chinese enterprises. There is a SQL injection vulnerability in Sanjin Network's website construction system, which ca...