Nextcloud Android SQL Injection Vulnerability

Nextcloud is a suite of client-server software for creating network drives.Nextcloud Android is the Nextcloud Android client. A security vulnerability exists in Nextcloud Android. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications...

Participants Database Temporal SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Participants Database plugin prior to version 1.9.5.5. T...

CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting Vulnerability

Exploit for cgi platform in category web applications Exploit Title: CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting Google Dork: In Shodan search engine, the filter is "CHIYU" Exploit Author: Luca.Chiou Vendor Homepage: https://www.chiyu-t.com.tw/en/ Version: BF430 232/485 TCP/IP...

Jobberbase SQL Injection Vulnerability (CNVD-2020-04571)

Jobberbase is an open source platform for building job search websites. A SQL injection vulnerability exists in Jobberbase. The vulnerability stems from a lack of validation of externally entered SQL statements in the database-based application. An attacker can exploit this vulnerability to execu...

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10169)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CVE-2020-8592

eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...

UBUNTU-CVE-2020-7471

Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter. By passing a suitably crafted delimiter...

CVE-2016-11018

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

UBUNTU-CVE-2019-17357

Cacti through 1.2.7 is affected by a graphs.php?templateid= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, ...

SQL Injection Vulnerability in MetInfo us***.cl***.php File

MetInfo is an open source and free CMS building system suitable for enterprise building, MetInfo enterprise website management system is mainly used to build enterprise websites, using PHP + Mysql architecture. MetInfo us.cl.php file SQL injection vulnerability. Attackers can use the vulnerabilit...

SOPlanning SQL Injection Vulnerability

SOPlanning is an online planning tool. A SQL injection vulnerability exists in SOPlanning version 1.45. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...

Xiamen Service Cloud Information Technology Co., Ltd. website security dog with SQL injection vulnerability

Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. Xiamen Service Cloud Information Technology Co., Ltd. website security dog SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in iWebShop of Jinan Ai Cheng Network Technology Co.

iWebShop is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source free mall system. Jinan Ai Cheng Network Technology Co., Ltd. iWebShop SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the...

SQL injection vulnerability in the us***.php page of Xi'an BaiLian Network Technology Co.

Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. web mall station building system v3.0 front us.php page SQL injection...

SQL Injection Vulnerability in Laiku Push E-commerce System (CNVD-2020-13872)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laikipu E-commerce system, which can be exploited by attackers to obtain sensitive information...

SonicWall Global Management System Webservice Module SQL Injection Vulnerability

The SonicWall Global Management System GMS is a global management system from SonicWall USA. The system enables rapid deployment and centralized management of Dell SonicWALL firewall, anti-spam, backup and recovery, and secure remote access solutions. A SQL injection vulnerability exists in the...

SQL Injection Vulnerability in in***.php Page of LiangJing Enterprise Intelligent Management System

Liangjing Enterprise Intelligent Management System is an enterprise building system. A SQL injection vulnerability exists in the in.php page of LiangJing Enterprise Intelligent Management System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in ejucms Xi***.php File

EJU real estate system ejucms is a set of localized O2O real estate website platform system. A SQL injection vulnerability exists in the ejucms Xi.php file, which can be exploited by attackers to obtain sensitive information...

SQL injection vulnerability in the frontend fl***.php file of Dascommerce B2B2C multi-user mall system

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. A SQL injection vulnerability exists in the fl.php file of the B2B2C multi-user mall system. An attacker can use the vulnerability to obtain sensitive...

SPIP < 3.1.12, 3.2.x < 3.2.7 DB Injection Vulnerability

SPIP is prone to a database injection vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...