SQL Injection Vulnerability in Sanjin Web Site Construction System

Guangzhou Sanjin Network Technology Co., Ltd. is an Internet application service provider, providing international, professional, personalized and branded e-commerce solutions for Chinese enterprises. There is a SQL injection vulnerability in Sanjin Network's website construction system, which ca...

SQL Injection Vulnerability in JYmusic ArticleController.php Page

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the JYmusic ArticleController.php page. Allow attackers to exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in JYmusic AlbumController.php Page

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the JYmusic AlbumController.php page. Allow attackers to exploit the vulnerability to obtain sensitive database information...

CVE-2017-2715

The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to...

Design/Logic Flaw

The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to...

CVE-2017-2715

The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to...

SQL Injection Vulnerability in Multiple Evaluation System

Xiamen Phoenix Chuangyi Software Co., Ltd. is mainly committed to the Internet three-dimensional dynamic interactive software platform research, development, application and promotion. There is a SQL injection vulnerability in the Multi-dimensional Evaluation System. The vulnerability allows an...

SQL Injection Vulnerability in Ming Enterprise Technology Website Construction System

Shanghai Ming Enterprise Information Technology Co., Ltd Ming Enterprise Technology is engaged in website construction, network marketing, domain name hosting and Internet application development. A SQL injection vulnerability exists in Ming Enterprise's website construction system. The...

CVE-2017-15864

In the Agent Frontend in Open Ticket Request System OTRS 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password...

EasySNS Minimalist Community callback_pingfen method and checkusergroupinfo method have SQL injection vulnerabilities

EasySNS Minimalist Community Group Edition is a new database architecture and program structure to form an interactive community with a group as the basic unit. EasySNS Minimalist Community callbackpingfen method and checkusergroupinfo method have SQL injection vulnerability, the vulnerability is...

SQL Injection Vulnerability in Youkai 365 Business v1.5 System

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. A SQL injection vulnerability exists in the UX365 Business v1.5 system, which is caus...

SQL Injection Vulnerability in Axublog v1.0.6 hit.php Page

Axublog is a PHP personal blog system. A SQL injection vulnerability exists in the Axublog v1.0.6 hit.php page. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in MIPCMS ApiAdminUser.php Page

MIPCMS is a free and open source based on Baidu Mobile Accelerator MIP engine based on the development of articles, information, content management system, but also the system for the Internet webmasters, entrepreneurs and other groups to create SEO-optimized after the station-building system. A...

SQL Injection Vulnerability in WebShow Shopping System V5.4

Net show shopping system is a shopping site developed with asp + access. Nethub Shopping System V5.4 front-end textBox3.asp exists SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Multiple SQL Injection Vulnerabilities in phpaaCMS

phpaaCMS is a simple article management system. A SQL injection vulnerability exists in /search.php and /message.php in phpaaCMS v0.5, which can be exploited by attackers to obtain sensitive information about the database...

SQL Injection Vulnerability in DM Enterprise Building System v201710

DM building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM enterprise website building system v201710 login at the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in Zendo Version 9.1.2

Zendo is an open source project management software. A SQL injection vulnerability exists in Zendo version 9.1.2 due to the system failing to effectively filter user-submitted data. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in phpaacms page.php File

phpaaCMS is a simple article management system. A SQL injection vulnerability exists in the phpaacms page.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in 74cms MembersController.class.php Page

Knight Talent System 74cms is a free website management system based on PHP+MYSQL. A SQL injection vulnerability exists in the 74cms MembersController.class.php page, which can be exploited by attackers to obtain sensitive database information...

Catfish CMS v4.5.7 SQL Injection Vulnerability in Frontend

Catfish CMS is open source free PHP CMS web content management system. Catfish CMS v4.5.7 suffers from a SQL injection vulnerability in the frontend. An attacker can exploit this vulnerability to obtain sensitive database information...