Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35834)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-22783

Etherpad 1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by Etherpad...

Code injection

Etherpad 1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by Etherpad...

CVE-2020-22783

Etherpad 1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by Etherpad...

CVE-2020-22784

Affected software : Etherpad UeberDB (pre-0.4.4). Root cause : MySQL omits trailing spaces on CHAR/VARCHAR during comparisons, allowing bypass of key-name access controls via the MySQL connector. Impact : Bypassing access controls for key names in database records. Status : Exploitation details n...

CVE-2021-29442

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly...

Oracle Linux 8 : mariadb:10.3 / and / mariadb-devel:10.3 (ELSA-2021-1242)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1242 advisory. galera 25.3.32-1 - Rebase to 25.3.32 mariadb 3:10.3.28-1 - Rebase to 10.3.28 Tenable has extracted the preceding description block directly from the Oracle Linu...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34300)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Youdot CMS System (CNVD-2021-32482)

Founded in 2012, Changsha Youdot Software Technology Co., Ltd. provides small and medium-sized enterprises SMEs with integrated solutions for website construction, new retail smart stores, micro-sites, micro-malls, live selling, and multi-end mini-programs. A SQL injection vulnerability exists in...

SQL Injection Vulnerability in Intelligent Safe Electricity Management Platform of Ankre Electric Co.

Founded in 2003, Anchorui Electric Co., Ltd. is a high-tech joint-stock enterprise integrating R&D, production, sales and service, providing energy efficiency management and electricity safety solutions for enterprise microgrids. A SQL injection vulnerability exists in the Intelligent Safe...

SQL Injection Vulnerability in AKCMS

AKCMS is the most famous lightweight CMS builder in China. AKCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2021-28242

SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cfname" parameter when creating a new filter under the "Collections" tab...

SQL Injection Vulnerability in the Website Building System of Shanghai Qiu Chuang Technology Co.

Ltd. was founded in 2001, specializing in providing e-commerce solutions and services for Chinese and foreign customers in various industries as well as Internet-based application services. A SQL injection vulnerability exists in the website building system of Shanghai Quchuang Technology Co., Lt...

No Auth, Seamless Database Security and Compliance

As data breaches continue to target databases and attack techniques become more sophisticated over time, organizations are looking for dynamic and efficient ways to effectively monitor the compliance posture of the databases in their hybrid environments. They have traditionally used privileged...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28833)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28832)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, attackers can use the...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28839)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

Huaxia ERP suffers from SQL injection vulnerability (CNVD-2021-28476)

Huaxia ERP based on SpringBoot framework and SaaS model , to provide open source ERP software for small and medium-sized enterprises , currently focusing on sales and marketing inventory + financial + production functions . Huaxia ERP has a SQL injection vulnerability, which can be exploited by...

CVE-2021-26919

CVE-2021-26919 affects Apache Druid, where allowing users with certain JDBC permissions to supply MySQL JDBC properties not on the allowed list could enable code execution in Druid server processes via a malicious MySQL server. Documented behavior: trusted users can set up lookups or ingestion ta...

SQL Injection Vulnerability in Huaxia ERP (CNVD-2021-27666)

Huaxia ERP based on SpringBoot framework and SaaS model , to provide open source ERP software for small and medium-sized enterprises , currently focusing on sales and marketing inventory + financial + production functions . Huaxia ERP has a SQL injection vulnerability, which can be exploited by...