SQL Injection Vulnerability in China Alliance Website Building System

Headquartered in Hong Kong, China Alliance Network Group Co., Ltd. is an Internet digital services integrator that has gone through 18 years of history, and has provided more than 10,000 customers with good Internet website construction, micro letter micro business, APP development, 3DVR panorama...

Cloud Data Security is Now Available in AWS Marketplace

We’re pleased to announce that Imperva Cloud Data Security is now available in the Amazon Web Services Marketplace. Database security shouldn’t be hard, so Imperva has made it simple. Imperva Cloud Data Security CDS is a SaaS solution specifically designed to secure organizations’ data stored in...

SQL Injection Vulnerability in Hotel Conference Information Distribution System of Ammed Century (Beijing) Technology Co.

Ammed Century Beijing Technology Co., Ltd. is a digital service solution provider and digital content operation service provider for star-rated hotels. A SQL injection vulnerability exists in the Hotel Conference Information Distribution System of Ammed Century Beijing Technology Co., Ltd, which...

Shenzhen Zero-One Information Technology Co., Ltd. website building system SQL injection vulnerability

Shenzhen Zero-One Information Technology Co., Ltd. is a business intelligence solution provider integrating consulting, professional services and product marketing. There is a SQL injection vulnerability in the website building system of Shenzhen Zero One Information Technology Co. Attackers can...

CVE-2020-35568

MB Connect Line products mbCONNECT24, mymbCONNECT24, and Helmholz MyREX24/MyREX24.virtual (versions through 2.11.2) are affected by CVE-2020-35568 due to an incomplete filter on a database response that allows an authenticated attacker to gain non-public information about other users and devices ...

CVE-2021-27235

Mutare Voice (EVM) 3.x before 3.3.8 contains an insecure admin-portal export at diagzip.asp that allows unauthenticated users to export database tables. Root cause is a misconfigured export function without proper access controls, enabling potential data disclosure. Affected product: Mutare Voice...

Jinan Yuxia Information Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-16393)

Jinan Yuxia Information Technology Co., Ltd. to the Internet products and related services as the main direction, is a collection of website construction and network promotion, IDC business, software development, server hosting, telecommunications value-added services and other integrated service...

Wenzhou Yougu Technology Co., Ltd. website building system has SQL injection vulnerabilities (CNVD-2021-16396)

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Technology Co., Ltd. station building system there is a SQL injection vulnerability, th...

Wenzhou Yougu Technology Co., Ltd. website building system has SQL injection vulnerabilities (CNVD-2021-16394)

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Technology Co., Ltd. station building system there is a SQL injection vulnerability, th...

The vulnerability of the SQLite database management system, related to writing data beyond the buffer boundaries in memory, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the SQLite database management system is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SQL Injection Vulnerability in the Website Building System of Guangzhou Benying Computer Technology Co.

Guangzhou Benying Computer Technology Co., Ltd. is committed to building the Internet + business ecology, especially focusing on the field of mobile Internet, to provide APP development, system development, small program and WeChat public number secondary development, website construction and oth...

Design/Logic Flaw

SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for an SAP HANA instance might be able to tamper with it and alter it in a way that the digest continues to be the same and without invalidatin...

SQL Injection Vulnerabilities in the Website Building System of Jingzhou Huacheng Network Information Technology Co.

Jingzhou Huacheng Network Information Technology Co., Ltd. is a set of website planning and construction, network optimization and promotion, software research and development, hotel management system agent sales as well as large-scale website operation and other projects as one of the profession...

SQL Injection Vulnerability in Website Building System of Jingzhou Huacheng Network Information Technology Co. Ltd (CNVD-2021-14436)

Jingzhou Huacheng Network Information Technology Co., Ltd. is a set of website planning and construction, network optimization and promotion, software research and development, hotel management system agent sales as well as large-scale website operation and other projects as one of the profession...

SQL Injection Vulnerability in Website Building System of Guangzhou Huanuo Computer Technology Co.

Guangzhou Huanuo Computer Technology Co., Ltd. is an integrated Internet application service provider. Guangzhou Huanuo Computer Science and Technology Co., Ltd. website building system has a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the...

CVE-2020-10554

CVE-2020-10554 affects Psyprax before 3.2.2. The issue is that passwords used to encrypt data are stored in the database in an obfuscated format that can be easily reverted (e.g., AAAAAAAA stored as MMMMMMMM). The Red Hat and NVD entries corroborate this description. The available documents do no...

SQL Injection Vulnerability in Enterprise Collaboration Office System

Chengdu Excellence Yuan Yang Information Technology Co., Ltd. is a company dedicated to providing management software for enterprises. An SQL injection vulnerability exists in the Enterprise Management Bao Collaboration Office System, which can be exploited by attackers to obtain sensitive...

SQL injection vulnerability in the pr***.asp page of the website building system of Ruian Uber Technology Co. Ltd (CNVD-2021-15516)

Ltd. is a social public to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM desig...

Ship 100 virtual goods autoship system bu***.php page has sql injection vulnerability

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. Ship 100 virtual goods autoship system bu.php page there is a sql injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

2021 KuppingerCole Leadership Compass names Imperva an overall leader for Database and Big Data Security

It is my pleasure to report that in their 2021 overview of the market for Database and Big Data Security solutions, leading technology analyst KuppingerCole has identified Imperva as an Overall Leader for the first time. Imperva scored five out of five for product security, functionality,...