SQL Injection Vulnerability in Huizhou Business Network CMS System

A SQL injection vulnerability exists in the Huizhou Business Network CMS system. An attacker is allowed to exploit the vulnerability to obtain sensitive database information...

Generalized SQL Injection Vulnerability in Seven Colors Network Website Builder System

A generic SQL injection vulnerability exists in the Seven Colors Network website builder system. The vulnerability allows attackers to obtain sensitive database information...

Arbitrary File Read Vulnerability in Jinhe IOAS Standard Office System for SMEs

Beijing Jinhe Network Co., Ltd. is an enterprise that provides informationization solutions and collaborative management software, and IOAS Standard Office System for Small and Medium-sized Enterprises is one of the products of Beijing Jinhe Network Co. IOAS is a product of Beijing JinHe Network...

SQL Injection Vulnerability in reftype Parameter of Panmicro Collaboration Management Platform

Ltd. is a company that provides enterprise collaboration management software and application solutions. A SQL injection vulnerability exists in the reftype parameter of Panavision collaboration management platform. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Shanghai Jiaoda Withub's Court Litigation Service Platform

Shanghai Jiaoda Withub Information Industry Co., Ltd. is mainly engaged in computer network and network security integration, application software development, building intelligence system integration, as well as agent sales of IT products. The court litigation service platform is one of the...

JVN#92828286: Welcart vulnerable to SQL injection

Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a SQL injection CWE-89 vulnerability due to the processing of changeSort parameter in admin.php. Impact An attacker that can log in to WordPress with this plugin enabled may obtain or alter...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flow/flowtype_other.php Parameter

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flow/flowtypeother.php parameter, which can be exploited by an attacker to obtain sensitive information from the database...

TCCMSV9.0 Latest Version SQL Injection Vulnerability

TCCMS is a content management system. TCCMSV9.0 has multiple SQL injection vulnerabilities in app/controller/news.class.php, which can be exploited by attackers to either obtain sensitive database information...

SQL injection vulnerability in the view_xz.aspx?a= parameter of Ticketmaster software at Shanghai Shengdai Information Technology Co.

Ticketmaster is a specialized ticket management system for airline ticket agents. A SQL injection vulnerability exists in the viewxz.aspx?a= parameter of the Ticketmaster Software of Shanghai Shengdai Information Technology Company Limited, which allows an attacker to exploit the vulnerability to...

SQL Injection Vulnerability in Panmicro e-Weaver System

e-Weaver system is a Panmicro OA office software. A SQL injection vulnerability exists in the e-Weaver System/ServiceAction/com.eweaver.base.DataAction page of Panmicro, which can be exploited in a comprehensive manner to allow an attacker to obtain sensitive information about the database...

SQL Injection Vulnerability in OA Network Collaboration Office Platform User Parameters

Zhixiang OA office system is an enterprise office system. A SQL injection vulnerability exists in the user parameter of the mainpage/msglog.aspx page of Zhixiang OA network collaborative office platform. Comprehensive exploitation of the vulnerability allows attackers to utilize commonly used SQL...

SQL Injection Vulnerability in Haitian OA System ID Parameter

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...

Information disclosure

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7.0.0.8 IF2 allows local users to obtain sensitive database information via unspecified vectors...

CVE-2015-0200

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7.0.0.8 IF2 allows local users to obtain sensitive database information via unspecified vectors...

SQL injection vulnerability in HIMS hotel management system/hotel/PhotoA.php page of Beijing Century Compass E-commerce Co.

Beijing Century Compass E-commerce Co., Ltd HIMS-type hotel management system is a set of software to provide management services for hotels, supporting membership, food and beverage, website/mobile application, intelligent cloth, channel distribution, revenue management and so on. Beijing Centur...

Instant v2.0 SQL Injection Vulnerability

A SQL Injection Vulnerability has been discovered in the Instant v.2.0 CMS. The Vulnerability is located in the subid Value of the productcat.php File. Attackers are able to execute own SQL commands by usage of a GET Method Request with manipulated subid Value. Attackers are able to read Database...

OverCoffee Instant 2.0 SQL Injection

========================================================================================== Instant v2.0 SQL Injection Vulnerability ==========================================================================================...

Default configuration

The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408...

CVE-2014-9249

The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408...

CVE-2014-9249

The CVE-2014-9249 entry affects Zenoss Core before version 5, where the default configuration exposes services on open ports that allow remote attackers to read or modify database information (ZEN-15408). The connected sources corroborate this description but do not provide concrete remediation d...