SQL injection vulnerability in pr***.aspx of the website building system page of Jacko Network Design Studio (CNVD-2020-52259)

Jacko Network Design Studio is an integrated communication agency with multi-faceted professional services such as website construction, graphic design, advertising production and printing. There is a SQL injection vulnerability in pr.aspx, which can be exploited by attackers to obtain sensitive...

Yixing Yifa Network Service Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2020-51547)

Yixing Yifa Network Service Co., Ltd. is a company with website construction, WeChat public platform, WeChat marketing as the main business. Yixing Yifa Network Service Co., Ltd. website building system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive informati...

Shanghai Zhihu Information Technology Website Building System suffers from SQL Injection Vulnerability

Shanghai Zhihu Information Technology Co., Ltd. is a high-tech enterprise focusing on software customization and product development. Shanghai Zhihu Information Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information fro...

SQL Injection Vulnerability in Website Building System of Shenzhen Shenzhou Tongda Network Technology Co.

Shenzhen Shenzhou Tongda Network Technology Co., Ltd, provides Tencent enterprise mailbox, high-end website construction PC website, cell phone website, WeChat public account, SEO optimization and promotion, enterprise WeChat and other network infrastructure services and network marketing and...

SQL Injection Vulnerability in Instant Messaging Manager

Instant Messaging Manager is a tool that combines communication capabilities. Instant Messaging Manager suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Vulnerability of the MySQL Server component: Security: Roles of the database management system, which allows attackers to gain unauthorized access to protected information or to modify, add, or delete data.

Vulnerability of the MySQL Server component: Security: The roles of the MySQL Server database management system are related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information or to...

rConfig SQL Injection Vulnerability (CNVD-2020-43136)

rConfig is an open source network configuration management utility . A SQL injection vulnerability exists in rConfig version 3.9.5, which can be exploited by a remote attacker to view, add, modify or delete information in the back-end database by sending specially crafted SQL statements to the...

Denial of Service Vulnerability in gbase 8a at Tianjin Nanda General Data Technology Co.

GBase 8a is a secure database management system. A denial of service vulnerability exists in gbase 8a of Tianjin Nanda General Data Technology Co. Ltd. that can be exploited by attackers to cause a denial of service in the database management system...

SQL Injection Vulnerability in 5vshop E-commerce System of Shijiazhuang Zhenhong Network Technology Co.

5vshop belongs to Shijiazhuang Zhenghong Network Technology Co., Ltd, since 2004 has been committed to the enterprise Internet application of related services, engaged in enterprise, personal e-commerce website construction; e-commerce project planning, creativity, operation, to provide a...

SQL Injection Vulnerability in Hefei Blue Collar Business Co.

Hefei Blue Collar Business Information Co., Ltd. SEO team, founded in 2008, since its inception has been studying the combination of website Baidu optimization, Internet marketing, website construction. To provide enterprises with a full range of information technology application program. Hefei...

Denial of Service Vulnerability in GBase 8a Database of Tianjin Nanda General Data Technology Co.

GBase 8a is a column-store relational database management system with efficient and complex statistical and analytical capabilities, capable of managing terabytes of data. A denial-of-service vulnerability exists in the GBase 8a database of Tianjin Nanda General Data Technology Company Limited,...

SQL Injection Vulnerability in the Website Building System of Ruian Uber Technology Co. Ltd (CNVD-2020-48644)

Ltd. is a social mass to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM design...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields...

SQL Injection Vulnerability in Website Building System of Shanghai Youpin Network Technology Co.

Ltd. is a provider of website development and search engine marketing services. There is a SQL injection vulnerability in the website building system of Shanghai Youpin Network Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

WebChess SQL Injection Vulnerability

WebChess is a web-based online chess game. A SQL injection vulnerability exists in WebChess version 1.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL command...

SQL injection vulnerability in ro***.php page of Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion, full network marketing, large-scale mall and platform construction, micro letter development, mobile client development, office OA and other services. Jinan Guanan...

IBM DB2 Competitive Conditions Issue Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2 including DB2 Connect Server. A local attacker could exploi...

Unspecified Vulnerability in IBM DB2

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2. An attacker can exploit the vulnerability to cause a denia...

CVE-2020-4414

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory. By sending a specially-crafted request, an attacker could exploit this vulnerabili...

CVE-2020-4363

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 178960...