SQL Injection Vulnerability in YouDianCMS Backend

YouDianCMS is an enterprise website management system developed by Changsha YouDian Software Technology Co. YouDianCMSv8.0 has a SQL injection vulnerability in the background. Attackers can use the vulnerability to obtain, modify, delete database information, obtain server privileges and other...

CVE-2019-4598

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 167881...

SQL Injection Vulnerability in Manage.php of Jinwei Smart Restaurant System Version 0.7.2

Jinwei Smart Restaurant System is a free restaurant management software. It is suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, western food, hot pot restaurant and other kinds of catering business. SQL injection vulnerability exists in manage.php in...

CVE-2020-9398

ISPConfig before 3.1.15p3, when the undocumented reverseproxypanelallowed=sites option is manually enabled, allows SQL Injection...

SQL Injection Vulnerability in Shop7z Online Shopping System Fashion Edition of Shijiazhuang Zhenghong Network Technology Co.

Shop7z online shopping system is ASP online store platform software. Shijiazhuang City Zhenghong Network Technology Co., Ltd Shop7z online shopping system fashion version of the existence of SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the...

Yantai Cloud Pulse Network Technology Co., Ltd. SQL injection vulnerability exists in Cloud Pulse Network website building system

Yantai cloud pulse network technology limited company cloud pulse network for brands to provide network station building services. There is a SQL injection vulnerability in the Yantai Cloud Vein Network Technology Co., Ltd. website builder system that can be exploited by attackers to obtain...

SQL Injection Vulnerability in the Raining Novels cms Ne***.phpp File

Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. A SQL injection vulnerability exists in the Ne.phpp file of the Drizzle Novel cms. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in UQCMS Cloud Business System me***.cl***.php Page

UQCMS cloud business system is the program using PHP + MYSQL template using smarty template, front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system me.cl.php page SQL injection vulnerability exists. An attacker can exploit this vulnerability to obtain...

Heybbs no***_ta***.php file suffers from a SQL injection vulnerability

Heybbs is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community programs. A SQL injection vulnerability exists in the Heybbs nota.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SemCMS SE***_In***.php file suffers from SQL injection vulnerability (CNVD-2020-18750)

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEIn.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SOPlanning SQL Injection Vulnerability (CNVD-2020-10632)

SOPlanning is an online planning tool for efficiently organizing projects and tasks. An SQL injection vulnerability exists in the OrderBy clause in SOPlanning 1.45. An attacker can exploit this vulnerability to obtain information about a user's table via the projets.php?order=nomcreateur&by=...

SQL injection vulnerability in Zendo Project Management Software co***.php file

Zendo Project Management Software is homegrown open source project management software. Zendo Project Management Software co.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Huaihua Fifth Element Network Information Co.

Huaihua Fifth Element Network Information Co., Ltd. is an Internet + application services company, Internet technology, marketing, operations, big data analysis, cloud computing applications as the core, to carry out the Internet + industrial integration operation and development. Huaihua Fifth...

SQL Injection Vulnerability in the ad***.php page of the Shipping 100 Virtual Goods Autoship system

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. SQL injection vulnerability exists in the ad.php page of the Shipment 100 virtual goods autoship system, which can be exploited by attackers to obtain sensitive information from the database...

QuickDate SQL Injection Vulnerability

QuickDate is a dating personals social platform. QuickDate suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in the re***.php file of the VIP movie system of Tuan ah (CNVD-2020-15067)

Group ah VIP movie system is a set of registered members with proxy version of the VIP movie video watching website source code. There is a SQL injection vulnerability in the re.php file. Attackers can use the vulnerability to obtain sensitive information in the database...

Nextcloud Android SQL Injection Vulnerability

Nextcloud is a suite of client-server software for creating network drives.Nextcloud Android is the Nextcloud Android client. A security vulnerability exists in Nextcloud Android. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications...

Participants Database Temporal SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Participants Database plugin prior to version 1.9.5.5. T...

CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting Vulnerability

Exploit for cgi platform in category web applications Exploit Title: CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting Google Dork: In Shodan search engine, the filter is "CHIYU" Exploit Author: Luca.Chiou Vendor Homepage: https://www.chiyu-t.com.tw/en/ Version: BF430 232/485 TCP/IP...

Jobberbase SQL Injection Vulnerability (CNVD-2020-04571)

Jobberbase is an open source platform for building job search websites. A SQL injection vulnerability exists in Jobberbase. The vulnerability stems from a lack of validation of externally entered SQL statements in the database-based application. An attacker can exploit this vulnerability to execu...