SQL Injection Vulnerability in cms js/comments.php File

Search once cms video program is a set of ASP + MSSQL/ACCESS PHP + MYSQL environment to build an intelligent station-building system. Search once cms v1.6 php version of the js/comments.php file there is a sql injection vulnerability, an attacker can use the vulnerability to obtain database...

SQL Injection Vulnerability in Chengdu JWT jwcms

Chengdu, Chengdu, this network technology is a Chengdu, engaged in website planning, web design, website construction and development, website optimization, Internet marketing and other professional services in the field of network technology limited company. Chengdu JINWEI TECHNOLOGY jwcms SQL...

SQL Injection Vulnerability in Infinite Streaming Media System (AMS) of Beijing Zhongshi Media Technology Co.

Infinite Streaming Media System AMS is a complete set of IP network-based audio/video application platform, integrating CTVTV's live video broadcasting system, video-on-demand VOD system, video broadcasting system and video production sub-systems, aiming to provide users with a complete set of...

WeiPHP v4.0 beta SQL Injection Vulnerability in Frontend MessageController.class.phps Page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. WeiPHP v4.0 beta SQL injection vulnerability exists in the front-end MessageController.class.phps page. The vulnerability is due to the customsendall functi...

WeiPHP v4.0 beta SQL Injection Vulnerability in Frontend UserTagController.class.php Page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. WeiPHP v4.0 beta SQL injection vulnerability exists in the front-end UserTagController.class.php page. The vulnerability is due to the front page of the edi...

SemCms foreign trade website management system has SQL injection vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms php version of the use of the php language written in conjunction with apache, in window, or linux system ...

finecms has xml entity injection vulnerability

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. An xml entity injection vulnerability exists in finecms. An attacker can use this vulnerability to obtain sensitive information in the database...

U.S. Dept Of Defense: Two Error-Based SQLi in courses.aspx on ██████████

Summary: The server at ████ contains two SQL injection vulnerabilities in the courses.aspx file. These are error-based SQLi vulnerabilities. The resulting errors reveal seven lines of C code, including inline SQL which reveals internal database information. Note that this is one of two reports I'...

SQL injection vulnerability in the tid parameter of Zhejiang SouPai Information Technology PaiSang network station building system

Paixang network station-building system is a station-building system developed by Zhejiang Soupai Information Technology Co. There is a SQL injection vulnerability in the tid parameter of PaiSang website builder system, which is caused by the lack of effective filtering of the tid parameter, and...

Unspecified SQL Injection Vulnerability in EyesOfNetwork

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. EyesOfNetwork suffers from an unspecified SQL injection vulnerability. Allows ...

SQL Injection and Arbitrary File Read Vulnerabilities in vlcms_v1.2 Latest Version

vlcms Xigu software team based on the OneThink framework to develop a solution to the promotion of handicraft management system. vlcms page media parameter $giftid and parameter $gameid are SQL injection vulnerability, attackers can obtain database information through the loophole, constituting...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2016-11165)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...

BageCMS Management System Database Leakage Vulnerability

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. A database disclosure vulnerability exists in the BageCMS management system, allowing attackers to exploit the vulnerability to obtain sensitive database information...

JumboTCMS V7.1.5.0829 remark1 parameter has sql injection vulnerability

Will Bo CMS General Edition is a set of open source web content management system built by the Microsoft . JumboTCMS V7.1.5.0829 api/chinabank/AutoReceive.aspx?void=1&vpstatus=20&vamount=3&vmoneytype=4 There is a sql injection vulnerability in the parameter of the page mark1. An attacker can...

SQL Injection Vulnerability in type parameter of Haitian OA System/ZhuanTi/frmmain.asp page

Haitian OA network office system is suitable for enterprises and institutions of the general network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerability exist...

Name parameter SQL injection vulnerability in Wipro's Chinese scientific and technical journal system/index.asp page

Ltd, formerly known as Database Research Center of Chongqing Branch of China Science and Technology Information Research Institute, is a Chinese periodical database research organization in China. The name parameter SQL injection vulnerability in Wipro's Chinese scientific and technical journal...

SQL Injection Vulnerability in Mail Delivery Gateway System of Beijing Anning Innovation Network Technology Co.

Beijing Anning Innovation Network Technology Co., Ltd. mail delivery gateway system is an independent and powerful mail security system, applicable to the mail system of different user sizes of anti-virus, anti-spam needs, can be deployed in gateway type, can also be distributed embedded...

xEpan 1.0.4 - Multiple Vulnerabilities

Exploit Title: Multiple Vulnerability xEpan 1.0.4 Google Dork: not yet Date: 2014-11-27 Exploit Author: Parikesit , Kurawa In Disorder Vendor Homepage: http://xepan.org Software Link: http://www.xepan.org/index.php?subpage=download Version: 1.0.4 Tested on: Windows 7 Ultimate Vulnerability Type:...

方维团购4.3版本注射 官方演示大量数据库泄露

简要描述： .......... 详细说明： ....... 漏洞证明： Target: http://t1.fanwe.net:93/t1/index.php?m=Ajax&a=gettypeattr&typeid=123 Host IP: 112.124.32.200 Web Server: IIS Powered-by: WAF/2.0 Powered-by: WAF/2.0 DB Server: MySQL Resp. Timeavg: 168 ms Current User: [email protected] Current DB: t1 Host Name:...

SDCMS某处设计缺陷导致遍历任意文件内容

简要描述： SDCMS某处设计缺陷导致遍历任意文件内容 详细说明： 1、首先看看缺陷文件： 文件/sdcms/admin/sdtheme.asp ...... 第138行： case "edit" dim filename:filename=sdcms.fget"filename",0 if notsdcms.checkstrfilename,"filename" then sdcms.echo "filename is wrong" sdcms.die end if if notsdcms.isfile"../theme/"&filename then sdcms.echo...