CVE-2019-18464

In Progress MOVEit Transfer 10.2 before 10.2.6 2018.3, 11.0 before 11.0.4 2019.0.4, and 11.1 before 11.1.3 2019.1.3, multiple SQL Injection vulnerabilities have been found in the REST API that could allow an unauthenticated attacker to gain unauthorized access to the database. Depending on the...

SQL Injection Vulnerability in Thunderwind Movie Ne***.php Page

Thunderwind CMS is a video-on-demand system developed with Thinkphp framework + Mysql. Thunderwind Movie Ne.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL injection vulnerability in zzzphp sa***.php page

zzphp is a free website builder developed in PHP language. A SQL injection vulnerability exists in the zzzphp sa.php page, which can be exploited by attackers to obtain sensitive information...

SQL injection vulnerability in ad***_ne***.php file mo*** parameters in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file mo parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in in***.php page of S-CMS government website builder system

S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a special government station building solutions to provide products. S-CMS government website building system in.php page SQL injection vulnerability, attackers can use the vulnerability to obtain...

SQL injection vulnerability in ps*** method of seacms backend ad***_ne***.php file

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file ps method exists SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in seacms backend ad***_ma***.php file

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adma.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

Wordpress Sliced Invoices SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress Sliced Invoices suffers from a SQL injection vulnerability that can be exploited by attackers to execute illegal SQ...

Wordpress Groundhogg SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress Groundhogg suffers from a SQL injection vulnerability that can be exploited by attackers to execute illegal SQL...

SQL injection vulnerability in the pi***.asp page parameter of Enterprise First's website building system ma***.asp

Enterprise First website builder is a free website builder system provided by Enterprise First. SQL injection vulnerability exists in the ma.asp page pi parameter of the Enterprise First website building system, which can be exploited by an attacker to obtain sensitive information from the databa...

SQL Injection Vulnerability in EmpireCMS cl***.php File

EmpireCMS is a content management system CMS. An SQL injection vulnerability exists in the EmpireCMS cl.php file, which can be exploited by attackers to obtain sensitive information...

CVE-2019-18387

Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the id parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details...

WordPress freshmail-newsletter plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. freshmail-newsletter is an email marketing and newsletter plugin used in it. A SQL injection vulnerability exists in WordPress...

OpenEMR SQL Injection Vulnerability (CNVD-2019-37881)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in the interfaces/forms/eyemag/js/eyebase.php...

YouPHPTube 'user_id' Parameter SQL Injection Vulnerability

YouPHPTube is a PHP-based video website system. YouPHPTube version 7.6 has a SQL injection vulnerability in the 'userid' parameter of the /objects/subscribeNotify.json.php file. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. ...

PT-2019-14901 · Fusionpbx · Fusionpbx

Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.8 Description: The issue concerns an SQL injection flaw. Specifically, the call broadcast edit.php file uses an unsanitized id variable from the URL in an unparameterized SQL query. This allows for potential SQ...

Palo Alto Networks Zingbox Inspector SQL Injection Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A SQL injection vulnerability exists in the management interface in Palo Alto Networks Zingbox Inspector version 1.288 and earlier. Th...

TOPMeeting SQL Injection Vulnerability

TOPMeeting is a video conferencing solution. A SQL injection vulnerability exists in versions prior to TOPMeeting 8.8 2019/08/19. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to...

WordPress booking-system plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. booking-system is an online booking system plugin used in it. A SQL injection vulnerability exists in the WordPress booking-system...

SQL Injection Vulnerability in Panmicro e-cology va***.jsp

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...