SQL injection vulnerability in in***.php page of Harbin Qixun Technology Co.

Harbin Qixun Technology Co., Ltd. is an Internet enterprise specializing in small and medium-sized enterprise network marketing outsourcing. Harbin Qixun Technology Co., Ltd. building system in.php page there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitiv...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-24454)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in One Zero Technology's Website Building System

Zero-One Technology Ren is a business intelligence solutions provider that integrates consulting, professional services and product marketing. A SQL injection vulnerability exists in the website building system of ZeroOne Technology, which can be exploited by attackers to obtain sensitive...

SemCms SE***_Do***.php file suffers from SQL injection vulnerability (CNVD-2021-22608)

SemCms is an open source foreign trade enterprise website management system. SemCms SEDo.php file SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

Wordpress CleanTalk SQL Injection Vulnerability

Wordpress CleanTalk is an application plugin for Wordpress. Provides a free anti-spam plugin that works with the premium Cloud AntiSpam service cleantalk.org. Anti-Spam by CleanTalk WordPress plugin before 5.149 suffers from a SQL injection vulnerability that stems from entering unverified...

SQL Injection Vulnerability in SemCms Frontend

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. SemCms front-end SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

SemCms suffers from SQL injection vulnerability (CNVD-2021-22601)

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. SemCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Ke361 Frontend Ho***.cl***.php

Ke361 is an open source Taobao system. Ke361 frontend Ho.cl.php has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database data...

SQL Injection Vulnerability in BuildingEasy™ of Shanghai Jinhui Software Co.

Shanghai Jinhui Software Co., Ltd. is a high-tech enterprise focusing on the engineering design and construction industry, specializing in providing enterprise management informatization consulting services and software products. Ltd. BuildingEasy™ suffers from a SQL injection vulnerability, whic...

SQL Injection Vulnerability in E-Trend Intelligent eHR Management Platform (CNVD-2021-24433)

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. E-Trend Intelligent eHR Management Platform has SQL injection vulnerabilities, which ca...

Hacker dumps Guns.com database with customers, admin data

By Waqas Among other sensitive data, the database includes Guns.com administrator, WordPress, and Cloud log in credentials in plain-text format. This is a post from HackRead.com Read the original post: Hacker dumps Guns.com database with customers, admin data...

Aruba Networks AirWave Management Platform SQL Injection Vulnerability

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An SQL injection vulnerability exists in the API of Aruba Networks...

SQL Injection Vulnerability in DEDECMS (CNVD-2021-19725)

DEDECMS is a universal tool that allows you to comprehensively manage various sections on your website. DEDECMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Higher Continuing Education Teaching and Learning Platform

Ltd. is a large-scale enterprise specializing in distance learning content provision and learning support services. A SQL injection vulnerability exists in the Higher Continuing Education Teaching and Academic Affairs Platform, which can be exploited by attackers to obtain sensitive information...

CVE-2020-24913

QCubed 3.1.1 SQL Injection (CVE-2020-24913) affects the qcubed framework via profile.php using the strQuery parameter. An unauthenticated, remote attacker can inject SQL through a crafted POST request to access the database, with reports indicating the possibility of remote code execution in wors...

SQL injection vulnerability exists in yycms (CNVD-2021-21894)

yycms is a movie and television system. yycms suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Water Rights Trading System (CNVD-2021-18297)

Tangshan Liulin Automation Equipment Co., Ltd. is a high-tech enterprise specializing in the research and development, production, sales and system engineering technical services of Internet of Things security communication terminal and intelligent application platform software. There is a SQL...

SQL Injection Vulnerability in Shenzhen Butler Network Service Co.

IOT is a perfect mobile terminal solution provided by Shenzhen Butler Network Service Co., Ltd. for enterprises in response to the trend of mobile business. There is a SQL injection vulnerability in Shenzhen Butler Network Service Co., Ltd, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in the Home Furnishing ERP Management System of Shanghai Furnishing Alliance Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. There is a SQL injection vulnerability in the Home Decoration ERP Management System of Shanghai Decoration Alliance Information Technology Co., Ltd, which can be exploited by attackers ...

CVE-2021-26685

Aruba ClearPass Policy Manager contains a SQL injection vulnerability in the web-based management interface API that is exploitable by an authenticated remote attacker. Affected versions are prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. Successful exploitation could allow an attacker to obtain and m...