Cisco Prime Collaboration Provisioning SQL Injection Vulnerability (CNVD-2020-29595)

Cisco Prime Collaboration Provisioning PCP is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. Cisco Prime Collaboration Provisioning suffe...

SQL injection vulnerability exists in kkcms (CNVD-2020-33123)

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information database...

Shijiazhuang Zhenhong Network Technology Co., Ltd. Shop7z online shopping system flagship version of the existence of SQL injection vulnerabilities

Shop7z online shopping system is ASP online store platform software, providing application services based on Internet solutions. Shijiazhuang City Zhenghong Network Technology Co., Ltd Shop7z online shopping system flagship version of the SQL injection vulnerability, attackers can exploit the...

SQL Injection Vulnerability in Health Collection and Reporting System of Shanxi Xianqi Technology Co.

The health collection and reporting system is developed by PHP+mysql and the code is completely open source for secondary development. Shanxi Xianqi Technology Co., Ltd. health collection and reporting system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL injection vulnerability in the kg***_dr***.php page of Stone Technology's online examination system (CNVD-2020-32528)

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores. A...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-30167)

Extreme CMS is an open source and free PHPCMS web content management system. Extreme CMS is an open source free PHPCMS website content management system, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in the Payment Platform of Harbin Xinzhongxin Electronics Co.

Harbin Xinzhongxin Electronic Co., Ltd. is a payment platform solution provider. A SQL injection vulnerability exists in the payment platform of Harbin Xinzhongxin Electronics Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in LaySNS of Wuhan Classen Technology Co.

Laysns using Think + Layui as the technical basis for development, using the OOP approach to the basic operation of the framework to build, modular development approach to do for the form of functional development. Wuhan class Sen Technology Co., Ltd. LaySNS SQL injection vulnerability, attackers...

SQL Injection Vulnerability in 120 Emergency Command Center Web Service System (CNVD-2020-31608)

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the 120 Emergency Command Center Web Service System, which can be exploite...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

Shopizer Cross-Site Scripting Vulnerability

Shopizer is Shopizer team of a set of Java-based open source e-commerce solutions . A security vulnerability exists in Shopizer versions prior to 2.11.0. An attacker can exploit the vulnerability to inject a script and save it in the database to execute the script...

Information disclosure

In Shopizer before version 2.11.0, a script can be injected in various forms and saved in the database, then executed when information is fetched from backend. This has been patched in version 2.11.0...

SQL Injection Vulnerability in Hongyu Multi-User Mall System

Ltd. is an information technology service-oriented, based on the forefront of high-tech fields, specializing in network Web development and application of high-tech enterprises. There is a SQL injection vulnerability in Hongyu Multi-User Mall System, which can be exploited by attackers to obtain...

Extreme CMS suffers from SQL injection vulnerability

Extreme CMS is an enterprise-level open source content building system. Extreme CMS has a SQL injection vulnerability , attackers can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in 4-in-1 Enterprise Website Management System

Four-in-one enterprise website management system is a computer website + mobile website + WeChat public number + small program in one of the content management system. A SQL injection vulnerability exists in the Four-in-One Enterprise Website Management System, which can be exploited by attackers...

SQL Injection Vulnerability in New Commercial Housing Online Signing and Filing Management System sh***_im***.aspx Page

The online contract filing management system for newly-built commercial properties provides business management functions such as commercial property pre-sale license application, approval, commercial property booking, pre-sale, contract signing and online contract filing. SQL injection...

SQL Injection Vulnerability in Waychar Enrollment System aj***.php Page mo*** Parameters

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar enrollment system aj.php page mo parameters exist SQL injection vulnerability, an attacker can use this vulnerability to obtain sensitive information in the database...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2020-28108)

Waychar Registration System is an online registration system developed for sports events and other general events, supporting public numbers and small programs. Waychar Registration System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Smart Electricity Cloud Platform of Ankre Electric Co.

Anchorui Electric Co., Ltd Smart Electricity Cloud Platform is a set of electrical fire early warning and prevention management system developed for the frequent occurrence of electrical fires. There is a SQL injection vulnerability in Ankre Electric Co., Ltd.'s Intelligent Electricity Cloud...

Nanhao Online Marking System SQL Injection Vulnerability

Nanhao online marking system is an online marking system developed by Hebei Nanhao High-tech Development Co. Nanhao online marking system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...