Command Execution Vulnerability in the Backend of Wild Rain Novel CMS (CNVD-2020-68554)

Wild Rain Fiction Content Management System provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. Rain Novel cms backend command execution vulnerability , attackers can use the vulnerability to obtain server privileges...

Vulnerability fixed in IBM Db2

IBM has fixed a vulnerability in Db2, Db2 Connect Server and Db2 Accessories Suite. An authenticated malicious person with access to the system could potentially exploit the vulnerability to execute arbitrary code under a user's privileges. IBM has released updates to fix the vulnerability. For...

SQL Vulnerability in KKCMS

KKCMS is an open source video capture and playback system. The system is mainly used to automatically collect film and television resources and provide online playback capabilities. KKCMS has a SQL vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Multimedia Library of Jiangsu Suqian Jindian Technology Co.

Jiangsu Suqian Jindian Technology Co., Ltd. is a private high-tech company, the company is committed to education informatization, library management informatization and library equipment research and development and production, and provide comprehensive solutions. A SQL injection vulnerability...

CVE-2020-4655

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM...

SQL Injection Vulnerability in Website Building System of Chiton Group Co.

hereinafter referred to as "Chitong Group" was formerly known as Guizhou Chitong Network Technology Co. As an Internet business ecological service provider, Chitong Group focuses on the use of marketing service data in various industries, takes data activation as the basis of operation, and...

CVE-2020-26805

In Sentrifugo 3.2, admin can edit employee's informations via this endpoint -- /sentrifugo/index.php/empadditionaldetails/edit/userid/2. In this POST request, "employeeNumId" parameter is affected by SQLi vulnerability. Attacker can inject SQL commands into query, read data from database or write...

Sql injection

In Sentrifugo 3.2, admin can edit employee's informations via this endpoint -- /sentrifugo/index.php/empadditionaldetails/edit/userid/2. In this POST request, "employeeNumId" parameter is affected by SQLi vulnerability. Attacker can inject SQL commands into query, read data from database or write...

Elevation of Privilege Vulnerability in GBase 8s Database of Tianjin Nanda General Data Technology Co.

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. A privilege elevation vulnerability exists in the gbase 8s database of Tianjin Nanda General Data Technology Co. Ltd, which can be exploited by...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65124)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a privilege lifting vulnerability, which can be exploited by an attacker to perform operations with root privileges...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65123)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a privilege extraction vulnerability, which can be exploited by an attacker to modify /etc/passwd privileges via a symbolic link attack...

SQL Injection Vulnerability in Zhejiang Shenda Kiosk Management System (CNVD-2020-64875)

Zhejiang Shenda Intelligent Group is a company focusing on providing intelligent tourism whole industry chain product innovation, industrial planning and operation services. A SQL injection vulnerability exists in the Zhejiang Shenda kiosk management system, which can be exploited by attackers to...

GBase 8s database suffers from a boost vulnerability (CNVD-2020-65128)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

SQL Injection Vulnerability in SETA Management System

The SETA Management System is software that assists instructors in their teaching duties and helps students participate in courses online, while supporting access to parts of the content by students not in the course and course management by administrators. The SETA Management System suffers from...

SQL Injection Vulnerability in Shield Spirit Voting Sucker System (CNVD-2020-62833)

Shield Spirit Voting Powder Sucking System can be applied to the public number, through the WeChat public number of the message interface to collect the user to send the vote number of the data to reach the vote, with anti-brush voting voting function, but also efficiently suck the live powder...

CVE-2020-23945

A SQL injection vulnerability exists in Victor CMS V1.0 in the catid parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58244)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: DML component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...

U.S. Dept Of Defense: SQL Injection in www.██████████

Description: SQL Injection is a vulnerability which allows interference with the queries performed on a database, to obtain sensitive information which could be really useful to attackers. A web application database is often queried using user-requests parameters, which when are not properly...