Redfan iOffice Hospital Edition suffers from SQL Injection Vulnerability

hereinafter referred to as: Redfan Technology is a high-tech enterprise held by Guangzhou Shipbuilding International Company Limited, a subsidiary of China State Shipbuilding Corporation CSSC, one of the top ten military industrial groups. Red Sail iOffice Hospital Edition exists SQL injection...

SQL Injection Vulnerability in Firebird Portal Management System

Suzhou Coolman Software Technology Co., Ltd. is a high-tech enterprise of portal software development, which is engaged in the research and development of local portal system in China. Firebird portal management system has a SQL injection vulnerability. Attackers can use the vulnerability to obta...

SQL injection vulnerability in ne***-c***.asp page of website building system of Tianjin Qipeng Technology Development Co.

Tianjin Qipeng Technology Development Co., Ltd. is a professional for enterprises or individuals to provide website design and production, website construction, enterprise official website production, small program development, Baidu keyword promotion and optimization, APP development of a compan...

The vulnerability of the central/executar_login.php component of the Mk-Auth authentication software allows a hacker to execute arbitrary SQL queries against the database.

The vulnerability of the central/executarlogin.php component of the Mk-Auth authentication software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database in the target...

SQL injection vulnerability in songcms backend (CNVD-2021-12740)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

SQL injection vulnerability in UF U8-OA in***.jsp file

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in the UFIDA U8-OA in.jsp file, which can be exploited by an attacker to obtain sensitive database information...

SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co. Ltd (CNVD-2021-10547)

Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...

SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co. Ltd (CNVD-2021-10545)

Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...

SQL Injection Vulnerability in Surplus Vision HD Intelligent Recording and Broadcasting System

Ltd. NCAST is a high-tech enterprise focusing on product development in the three major fields of multimedia communication, video and audio coding and decoding, and intelligent image processing, as well as excellent Internet services. A SQL injection vulnerability exists in NCAST's HD Intelligent...

Sql injection

IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191398...

SQL Injection Vulnerability in Cumulus Reports

Cumulus Reports is a free enterprise-grade WEB reporting tool. Cumulus Reports suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Kotto's Fully Intelligent Parking Video Charging System (CNVD-2021-08429)

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in KOTO's fully intelligent parking video charging system. An attacker can exploit the...

SQL Injection Vulnerability in T_Pa***_Su***.aspx Page of KTO's Fully Intelligent Parking Video Charging System

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in the TPaSu.aspx page of KOTO's fully intelligent parking video charging system. An attacke...

SQL Injection Vulnerability in ZDNT's Customer Resource Management System (CNVD-2021-08472)

ZDNT Customer Resource Management System is a foreign trade management and foreign trade customer management and other functions of the software. There is a SQL injection vulnerability in ZJUENT Customer Resource Management System, which can be exploited by attackers to obtain sensitive informati...

Sql injection

An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selectedfolder HTTP request body parameter for the acp interface. The affected parameter which retrieves the file contents of the specified folder was found to be accepting malicious...

flatCore SQL Injection Vulnerability (CNVD-2021-03255)

flatCore is a lightweight content management system CMS based on PHP and SQLite. A SQL injection vulnerability exists in flatCore CMS prior to version 2.0.0 build 139. The vulnerability stems from the program accepting input from a malicious user without properly detecting the input, resulting in...

SAP Business Information Warehouse SQL Injection Vulnerability

SAP Business Information Warehouse SAP BW is a data warehouse for collecting and tabulating information in an enterprise environment from SAP Germany. The software is an enterprise-wide information center for data analysis from R / 3 and other business applications, including databases and extern...

SQL Injection Vulnerability in yycms Movie & TV System V2.3 Admin Catalog yy***_ed***.php

yycms is a movie and television system. yycms film and television system V2.3 version admin directory yyed.php SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Miku CMS Movie Management System

Miku CMS Movie and TV Management System is a video playback cms in China. There is a SQL injection vulnerability in Miku CMS, which can be exploited by attackers to obtain sensitive information from the database...

ISPConfig SQL Injection Vulnerability (CNVD-2021-02036)

ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...