SQL Injection Vulnerability in Water Resources Engineering Management System of Siltronic Ltd.

SCT is an information service provider in China, dedicated to the cause of disaster mitigation and benefit reduction, and provides the government with comprehensive solutions for disaster mitigation and benefit reduction informatization. A SQL injection vulnerability exists in the water project...

SQL injection vulnerability exists in the website building system of Four Creation Technology Co.

SCT is a Chinese information service provider dedicated to disaster reduction and development, providing the government with comprehensive solutions for disaster reduction and development information. There is a SQL injection vulnerability in the website building system of Four Creation Technolog...

PT-2021-22042

Name of the Vulnerable Software and Affected Versions: SP Rental Manager WordPress plugin versions up to and including 1.5.3 Description: The issue allows attackers to retrieve information contained in a site's database via SQL Injection. This is possible due to the vulnerability in the orderby...

WordPress plugin Easy Testimonial Manager SQL injection vulnerability

WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.A SQL injection vulnerability exists in the WordPress plugin Easy Testimonial Manager, which...

WordPress 插件 SQL注入漏洞

WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin Embed Youtube Video 1.0 and earlier versions are vulnerable to SQL injection, which...

WordPress 插件 SQL注入漏洞

WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.A SQL injection vulnerability exists in the WordPress plugin Easy Testimonial Manager, which...

SQL Injection Vulnerability in Panmicro e-cology (CNVD-2021-73908)

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management and...

PT-2021-10477

Name of the Vulnerable Software and Affected Versions: S-CMS version 1.0 Description: A SQL injection issue in the 4.edu.phpconnfunction.php component allows attackers to access sensitive database information. Recommendations: For S-CMS version 1.0, consider restricting access to the 4.edu.php...

YouDianCMS SQL Injection Vulnerability (CNVD-2021-67503)

YouDianCMS is a web CMS. version 8.0 of YouDianCMS is vulnerable to SQL injection, which stems from a lack of search keyword filtering in the search bar and can be exploited to obtain sensitive database information...

Cxuucms SQL注入漏洞

cxuucms is a PHP-based content relationship building system. cxuucms version 3.1 has a SQL injection vulnerability that originates from setting the pid parameter in public/admin.php, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Smart Meter Integrated Management System of Xintian Technology Corporation (CNVD-2021-70022)

Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A SQL injection vulnerability exists in the Smart Meter Integrated Management System of Xintian Technology Corporation, which can be exploited by attackers to obtain sensitive...

Sql injection

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcmsweb/Search.php component via the attrarray parameter. This vulnerability allows attackers to access sensitive database information...

SQL Injection Vulnerability in Gridview of Dawning Information Industry Co.

Gridview is the all-in-one comprehensive management system for high-performance computing platforms. A SQL injection vulnerability exists in Gridview of Dawning Information Industry Company Limited, which can be exploited by attackers to obtain sensitive information from the database...

PT-2021-10254

Name of the Vulnerable Software and Affected Versions: EARCLINK ESPCMS-P8 affected versions not specified Description: The issue is related to a SQL injection vulnerability in the espcms web/Search.php component. This vulnerability is exploited via the attr array parameter, allowing attackers to...

SQL Injection Vulnerability in Smart Gas System of New Day Technology Co.

Founded in 2000, Xintian Technology Co. It is a benchmark enterprise in China's electronic information industry. With the core competitiveness of "mastering core technology and continuous innovation", we continue to provide competitive products and intelligent solutions to realize energy saving,...

CVE-2020-22122

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...

Sql injection

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...

CVE-2020-22122

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...

HealthNode Hospital Management System SQL Injection Vulnerability

HealthNode Hospital Management System is a hospital management system. The system includes functions such as patient information management, ward management, surgery schedule management and financial management. HealthNode Hospital Management System suffers from a SQL injection vulnerability, whi...

PT-2021-10726

Name of the Vulnerable Software and Affected Versions Find a Place LJCMS version 1.3 Description A SQL injection issue in the "/oa.php?c=Staff&a=read" endpoint of Find a Place LJCMS allows attackers to access sensitive database information via a crafted POST request. Recommendations For Find a...