SQL Injection Vulnerability in Tanaosoft Towel Textile ERP System

Ltd. was formerly known as "Huai'an Qixi Software Co., Ltd.", is a dual-soft certification, with independent computer software research and development capabilities, software development and sales-oriented technology-based enterprises. A SQL injection vulnerability exists in the Tanaosoft Towel...

Hardcoded credentials

Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of...

CVE-2020-6780

Affected products: Bosch FSM-2500 server and Bosch FSM-5000 server (up to version 5.2). Root cause: use of a database password hash with insufficient computational effort (MD5), enabling credential disclosure. Impact: a remote attacker with admin privileges can dump other users’ credentials and m...

SQL Injection Vulnerability in Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion and so on. Ltd. has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in iOffice.net Hospital Edition

The business scope of Guangzhou Hongfan Computer Technology Co., Ltd. includes: computer room maintenance services, information technology consulting services, data processing and storage services, digital animation production, software development and so on. SQL injection vulnerability exists in...

SQL Injection Vulnerability in Extreme CMS Frontend (CNVD-2021-10367)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Electronic Evidence Management Software of Shenzhen Police Wing Intelligent Technology Co. Ltd (CNVD-2021-10394)

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management software SQL injection vulnerability,...

SQL Injection Vulnerability in LJCMS (CNVD-2021-10525)

LJCMS is a free and open source content management system. LJCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about the database...

Design/Logic Flaw

HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions...

CVE-2021-22850

CVE-2021-22850 concerns the HGiga EIP product, where an ineffective access control on certain pages permits attackers to access databases and perform privileged functions. The issue is described consistently across sources, with NVD citing two CVSS measurements: CVSS v2.0 base score 7.5 (HIGH) an...

CVE-2021-22851

HGiga EIP product contains an SQL Injection vulnerability in the document management page where an attacker can inject SQL commands via a specific URL parameter to access database schema and data. The available sources describe the vulnerability type and impact but do not specify affected version...

SQL Injection Vulnerability in oasys (OA automated office system)

oasys OA automated office system is oriented to the daily operation and management of the organization, employees and managers use the application system to improve the efficiency of the company's office. A SQL injection vulnerability exists in oasys OA automated office system. An attacker can...

SQL Injection Vulnerability in Lebang Website Building System (CNVD-2021-13487)

Hangzhou Lebang Technology Co., Ltd. is an Internet digital service integration organization integrating website mobile platform construction, mobile application development, network marketing integration and operation outsourcing. A SQL injection vulnerability exists in the Hangzhou Lebang websi...

CVE-2021-23837

An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selectedfolder HTTP request body parameter for the acp interface. The affected parameter which retrieves the file contents of the specified folder was found to be accepting malicious...

SQL Injection Vulnerability in Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd (CNVD-2021-05890)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a domestic service provider of the whole tourism industry chain with a high market share. There is a SQL injection vulnerability in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd. that can...

CVE-2020-17136

creationtimestamp| type| source ---|---|--- 2021-01-11 22:23:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve202017136.rb 2024-10-09 20:01:43+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2490 2025-02-06...

Nantong Baidu's website builder system suffers from SQL injection vulnerability

The business scope of Nantong Shouping Information Technology Co., Ltd. includes: research and development and sales of computer software and hardware; Internet technology services, etc. There is a SQL injection vulnerability in the website building system of Nantong Baidu Company, which can be...

CVE-2020-27285

Crimson 3.1 (Builds before 3119.001) is affected by CVE-2020-27285 due to Missing Authentication for Critical Function, enabling a user to read/modify the database without authentication. The issue is tied to the default configuration and affects the protocol converter component; Red Lion notes u...

CVE-2020-23250

GigaVUE-OS (GVOS) versions 5.4–5.9 are affected by a vulnerability stemming from the use of a weak hashing algorithm for data stored in the internal database. Root cause: weak hash algorithm. Documented impact is low (CVSS v3.1: 2.3) with local access required and no user interaction. No exploit ...

SQL Injection Vulnerability in Tengzhi Yunmao Store Management System

Tengzhi cloud trade through the store management system for fasteners, electromechanical tools, hardware industry store purchasing, warehousing, processing, sales, finance, statistics for the core business management module, to achieve comprehensive control of the store. Tengzhi cloud trade store...