Sql injection

IBM Datacap Taskmaster Capture IBM Datacap Navigator 9.1.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191045...

Shenzhen HeWeiShun Network Technology Co., Ltd. IP-COM in-depth Internet behavior management there are information leakage vulnerabilities

Shenzhen HeWeiShun Network Technology Co., Ltd. business scope includes network products, communication products, computer software and hardware, integrated circuit technology development, etc.. Shenzhen HeWeiShun Network Technology Co., Ltd. IP-COM in-depth Internet behavior management informati...

SQL Injection Vulnerability in Hybrid Alarm Receiver at Honeywell (China) Co.

Ltd. is part of Honeywell International, a diversified, high-tech advanced manufacturing company with a turnover of $38 billion. A SQL injection vulnerability exists in the Honeywell China Limited Hybrid Answering Machine, which can be exploited by an attacker to obtain sensitive information from...

CVE-2020-22168

CVE-2020-22168 concerns the PHPGurukul Hospital Management System v4.0, where a SQL injection exists in the file hms/change-emaild.php. The vulnerability allows remote, unauthenticated attackers to extract sensitive data from the database. Several connected sources corroborate the existence of a ...

CVE-2021-20736

CVE-2021-20736 affects GROWI; NoSQL injection (CWE-943) vulnerability in GROWI versions prior to v4.2.20 could allow a remote attacker to obtain or alter data via unspecified vectors. Connected sources confirm the fixed version is v4.2.20 (and the 4.2.x line), with guidance to upgrade; there is n...

07FLY-CRM Customer Management System suffers from SQL Injection Vulnerability

Zero take-off CRM management system 07FLY-CRM, based on the GPLv3 protocol release, for small and medium-sized enterprise management activities, currently provides customer relationship management CRM, sales and purchase inventory JXC and so on. A SQL injection vulnerability exists in the 07FLY-C...

CVE-2021-32582

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

SQL Injection Vulnerability in Fast Platoon CMS

Fast Row CMS is open source and free PHP enterprise website production, construction, development and optimization of SEO management system. There is a SQL injection vulnerability in Fastrack CMS. Attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Power Operation and Maintenance Platform of Shenzhen Zhongdian Electric Power Technology Co.

Shenzhen Zhongdian Electric Power Technology Co., Ltd, the company's business scope includes power integrated automation system, automation system configuration software, digital power intelligent instrumentation. Shenzhen CLP Power Technology Co., Ltd. power operation and maintenance platform ha...

Student Result Management System 1.0 - 'class' SQL Injection

Exploit Title: Student Result Management System 1.0 - 'class' SQL Injection Date: 09.09.2020 Exploit Author: Riadh Benlamine rbn0x00 Vendor Homepage : https://projectworlds.in Software Page: https://projectworlds.in/free-projects/php-projects/student-result-management-system-project-in-php/...

Sql injection

In Progress MOVEit Transfer before 2019.0.6 11.0.6, 2019.1.x before 2019.1.5 11.1.5, 2019.2.x before 2019.2.2 11.2.2, 2020.x before 2020.0.5 12.0.5, 2020.1.x before 2020.1.4 12.1.4, and 2021.x before 2021.0.1 13.0.1, a SQL injection vulnerability exists in SILUtility.vb in MOVEit.DMZ.WebApp in th...

SQL Injection Vulnerability in Xinhua SecPath U200-M

H3C SecPath U200-M is a new-generation UTM United Threat Management device designed by H3C for small and medium-sized enterprises/branch offices. The H3C SecPath U200-M suffers from an SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

XDcms suffers from SQL injection vulnerability (CNVD-2021-43013)

XDcms is a general purpose content management system. XDcms suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive database information...

Mcafee Database Security Server Code Issue Vulnerability

Mcafee Database Security Server is a database security software from Mcafee USA. The software provides users with a holistic view of the database and the corresponding security status, protecting business-critical databases from external, internal and insider database threats in real time. A code...

Mcafee Database Security Server Code Issue Vulnerability (CNVD-2021-39504)

Mcafee Database Security Server is a database security software from Mcafee USA. The software provides users with a holistic view of the database and the corresponding security status, protecting business-critical databases from external, internal and insider database threats in real time. A code...

McAfee Database Security Cross-Site Scripting Vulnerability

Mcafee Database Security Server is a database security software from Mcafee USA. The software provides users with a holistic view of the database and the corresponding security status, protecting business-critical databases from external, internal and insider database threats in real time. A...

SQL Injection Vulnerability in OLYM Reporter of Shenzhen Aolian Information Security Technology Co.

hereinafter referred to as "AOLINK" is a comprehensive cryptographic security enterprise integrating algorithm development, product research and development, solution realization, standard formulation and forward-looking technology research, and possessing the international leading comprehensive...

Mcafee Database Security Server Sensitive Information Plaintext Transfer Vulnerability

Mcafee Database Security Server is a database security software from Mcafee USA. The software provides users with a holistic view of the database and the corresponding security status, protecting business-critical databases from external, internal and insider database threats in real time. A...

CVE-2020-36004

AppCMS 2.0.101 is affected by a SQL injection in /admin/download_frame.php. The vulnerability, described in multiple sources (e.g., CNVD/CNNVD entries), allows an attacker to obtain sensitive information from the database. The Connected documents confirm the affected component and vulnerability c...

CVE-2021-31830

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in McAfee Database Security DBSec prior to 4.8.2 allows an administrator to embed JavaScript code when configuring the name of a database to be monitored. This would be triggered when any authorized...