SQL Injection Vulnerability in One-Card Consumption Management System of Anhui Kexun Education Equipment Group Co.

Anhui Kexun Education Equipment Group Co., Ltd. is a professional information technology integrated service provider specializing in computer software research and development, sales and service. There is a SQL injection vulnerability in the One Card Consumption Management System of Anhui Kexun...

CVE-2020-15052

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

SQL Injection Vulnerability in YzmCMS Backend or***.cl***.php

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A SQL injection vulnerability exists in YzmCMS backend or.cl.php. Attackers can use the vulnerability to obtain sensitive information ...

SQL Injection Vulnerability in ejucms Backend

EJU real estate system ejucms is a set of localized O2O real estate website platform system. ejucms background SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

ZZCMS suffers from SQL injection vulnerability

ZZCMS is a content management system for Merchants Network. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-3468

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values within SQL...

SQL Injection Vulnerability in Website Building System of Liaocheng City Sky Network Technology Co.

Ltd. provides one-stop online marketing planning, training, website construction, website production, website optimization, Baidu optimization, site optimization, keyword ranking, promotion, operation, SEO optimization and other e-commerce solutions, is committed to serving the vast number of sma...

SQL injection vulnerability in the ci*** parameter of the JEGallery component of Joomla!

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the ci parameter of the Joomla! JEGallery component, which can be exploited by attackers to obtain sensitive information from the database...

ZZCMS suffers from SQL injection vulnerability (CNVD-2020-47244)

ZZCMS is a free website builder developed in asp language. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

phpList SQL Injection Vulnerability (CNVD-2020-41812)

phpList is an open source newsletter and email marketing software from phpList UK. A SQL injection vulnerability exists in phpList 3.5.4 and earlier versions. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can...

CVE-2020-15008

A SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or 2019.12. A SQL Injection in the probe implementation to save data to a custom table exists due to inadequate server side validation. As the code creates dynamic SQL for the insert statement and utilizes the user...

S-CMS School Building System aj***.php suffers from SQL Injection Vulnerability

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS school website builder system aj.php SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database...

VulnCheck KEV: CVE-2018-7765

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter...

SQL Injection Vulnerability in New*** Page of Arctic Technology Website Builder System

Arctic Technology is mainly engaged in website construction, network promotion and enterprise WEB application team, is committed to enterprises, individuals, associations and organizations to provide website planning, construction, network maintenance and promotion services. There is a SQL...

Joomla! J2 JOBS SQL Injection Vulnerability

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla! J2 JOBS. The vulnerability stems from a database application that lacks validation of externally entered SQL statements. An attacker can exploit t...

SQL Injection Vulnerability in Personnel Payroll System of Schoolless Software Technology Co.

School Worry-free Software Technology Co., Ltd. is a high-tech development team engaged in the research and system development of educational software teaching applications. A SQL injection vulnerability exists in the personnel payroll system of SchoolWorryFree Software Technology Limited, which...

SQL Injection Vulnerability in Hubei Guosheng Technology Co.

Hubei Guosheng Technology Co., Ltd, is a company specializing in website construction, small program mall, micro distribution system and other services. Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the...

SQL injection vulnerability in deituiCMS (CNVD-2020-45160)

deituiCMS is a PHP-based open source content management system. A SQL injection vulnerability exists in deituiCMS, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Ac***.php File of Xinhuo OA Office System

Xinhu OA office system is an open source online office system. The Ac.php file of Xinhao OA Office System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Gal***-co***.php Page of Website Building System of Qingdao Shangzhixin Network Technology Co.

Qingdao Business to letter network technology limited company is a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services of high-tech specialized companies. There is a SQL injection vulnerability in gal-co.php, which can be...