S-CMS e-commerce system backend has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. A SQL injection vulnerability exists in the backend of S-CMS e-commerce system. An attacker can exploit the vulnerability to obtain sensitive information from the database...

S-CMS School Building System suffers from SQL Injection Vulnerability

S-CMS School Building System is a content management system for school websites. A SQL injection vulnerability exists in S-CMS School Building System. An attacker can exploit the vulnerability to obtain sensitive database information...

ShopsN open source mall system co***_ac*** function SQL injection vulnerabilities exist

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system coac function exists SQL...

WordPress Simple Download Monitor SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Simple Download Monito is used in one of the site download management plugin. A SQL injection vulnerability exists in Simple Download...

SQL Injection Vulnerability in Beijing Leader Shengshi Network Technology Development Center's Website Building System

Founded in 2007, Beijing Leader Shengshi Network Technology Development Center is a professional network company that provides a full range of corporate digital services, APP WeChat development and operation, website construction and network marketing services. There is a SQL injection...

yycms suffers from SQL injection vulnerability (CNVD-2020-59825)

yycms is a movie and television system. yycms suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Rapid7 Nexpose SQL Injection Vulnerability

Rapid7 Nexpose is a set of vulnerability management software from Rapid7, Inc. that can utilize scanning results to deeply probe the network. The software supports scanning the configuration environment for errors, vulnerabilities, malware, and more. An SQL injection vulnerability exists in Rapid...

SQL Injection Vulnerability in Ke Rong AIO Management System of Shenzhen Ke Rong Software Co.

Ke Rong AIO Management System is an enterprise management system developed by Ke Rong AIO Enterprises, which solves the personalized problems of upstream and downstream, cross-departmental, multi-functional, and changing needs of many enterprise customers in the process of informatization through...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59315)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

ZZCMS suffers from a file upload vulnerability (CNVD-2020-59410)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...

SQL Injection Vulnerability in ZZCMS2020 Backend

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Dream CMS Backend Sq***.cl***.php File

Dream CMS lmxcms is developed using php language and mysql database, and adopts the mainstream MVC design model. Dream CMS background Sq.cl.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Kinetix Software's Third-Party Logistics Collaboration Platform for Medical Devices

Established on March 06, 2007, Jinetek Software Jiangsu Co. The company's business scope includes: design, development and sales of software, logistics information service platform services; technical services and technical consulting in the field of Internet of Things; sales of electromechanical...

Zoho ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2020-54780)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...

PrestaShop SQL Injection Vulnerability

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A SQL injection vulnerability exists in PrestaShop version 1.7.5.0, versions prior to 1.7.6.8. The...

Observium SQL Injection Vulnerability (CNVD-2020-54789)

Observium is a low-maintenance auto-discovery network monitoring platform that supports multiple device types, platforms and operating systems. Observium suffers from an SQL injection vulnerability. An attacker can exploit this vulnerability by injecting malicious SQL statements via the cookie...

CVE-2020-24593

Mitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and access user credentials due to improper input validation...

CVE-2020-13500

SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter ClassName in CHaD.asmx is vulnerable to unauthenticated SQL...

SQL Injection Vulnerability in DbCms of Xinxiang Dabang Computer Software Co.

DbCms is a content management system. DbCms by Xinxiang Dabang Computer Software Co. Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Joomla! paGO Commerce SQL Injection Vulnerability

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla! paGO Commerce. An attacker can exploit the vulnerability to obtain sensitive database information...