VulnCheck KEV: CVE-2020-5722

Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root...

SQL Injection Vulnerability in the OA System of Shenzhen Boshi Xiechuang Network Technology Co.

Ltd. was founded in 2012, is China's largest open source collaboration management product development, services and solutions provider. There is a SQL injection vulnerability in the OA system of Shenzhen Boosi Xiechuang Network Technology Co., Ltd, which can be exploited by an attacker to obtain...

Xionghai CMS v1.0 SQL Injection Vulnerability in Background

XIONGHAI CMS is a comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS v1.0 there is a SQL injection vulnerability in the background, attackers can use the vulnerability to obtain sensitive information in the...

SQL Injection Vulnerability in the Website Building System of Kaiping Lianke Network Technology Co.

Kaiping Lianke Network was founded in 2005, is a main website construction, website promotion, speedy software, bathroom ERP management software, micro letter marketing company. Kaiping Lianke Network Technology Co., Ltd. website building system there is a SQL injection vulnerability, the attacke...

SQL Injection Vulnerability in NiuShop B2B2C Multi-Merchant Mall System Free Edition

NiuShop B2B2C Multi-Merchant Mall System is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2B2C Multi-commercial Mall System free version of the existence of SQL injection vulnerability, attackers can use the...

SQL Injection Vulnerability in Heybbs Frontend lo***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs front lo.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Heybbs Backend ad***_ad***_no***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background adadno.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Changsha Tianxin District Bin.com Network Technology Service Department's Website Building System Exists SQL Injection Vulnerabilities

Changsha Tianxin District Binnet Network Technology Service Department is a company engaged in corporate website construction, website promotion and other projects. Changsha Tianxin District Bin.com Network Technical Services Department website building system has a SQL injection vulnerability,...

CVE-2020-3936

UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command...

PbootCMS Enterprise Web Development and Construction Management System suffers from SQL Injection Vulnerability

PbootCMS is a new core permanent open source free PHP web development and building management system CMS developed by Avantech. PbootCMS enterprise website development and construction management system has a SQL injection vulnerability that can be exploited by remote attackers to submit special...

CVE-2020-9521

An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation SMA, affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being...

SQL Injection Vulnerability in PHPSHE

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE has a SQL injection vulnerability, which ca...

CVE-2019-20574

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the Wi-Fi history Content Provider. The Samsung ID is SVE-2019-14061 August 2019...

SQL Injection Vulnerability in Jinwei Supermarket Cashiering

Jinwei supermarket cash register designed for small and medium-sized supermarkets and community convenience stores to scan the code cash register tools, merchants can use an ordinary computer with Internet access with the code scanning gun to achieve the main functions of the supermarket cash...

DEBIAN-CVE-2020-10802

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

PT-2020-10037 · Cloud Native Computing Foundation +1 · Harbor +1

Name of the Vulnerable Software and Affected Versions: Cloud Native Computing Foundation Harbor versions prior to 1.8.6 and 1.9.3 Description: The issue allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform. This is a result of a flaw in the Cloud...

SQL injection vulnerability in the al***.cl***.php file of the UQCMS cloud commerce system

UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system al.cl.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

ShopsN open source mall system SQL injection vulnerability

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd. an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system . ShopsN open source mall system SQL injection vulnerability , attackers can us...

SQL injection vulnerability in the pa*** parameter of the ru***.php page of the website building system of Huaihua Fifth Element Network Information Company Limited (CNVD-2020-26552)

Huaihua Fifth Element Network Information Co., Ltd. is an Internet + application services company, Internet technology, marketing, operations, big data analysis, cloud computing applications as the core, to carry out the Internet + industrial integration operation and development. Huaihua Fifth...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2020-18399)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM...