The vulnerability of the FTS3 virtual table module in the SQLite database management system allows a hacker to execute arbitrary code.

The vulnerability of the FTS3 virtual table module in the SQLite database management system is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

SQL Injection Vulnerability in the Website Building System of Suzhou Topps Network Technology Co.

Suzhou Topps Network Technology Co., Ltd. is engaged in solving the website construction, Baidu promotion, Baidu bidding hosting, Ali network marketing treasure hosting, optimization station rental and sale. Suzhou Topps Network Technology Co., Ltd. station building system there is a SQL injectio...

The vulnerability of the central control server of SiNVR 3 allows a hacker to read or modify the database of the central control server, as well as perform operations on the databases or operating system commands with administrator privileges.

The vulnerability of the central control server of SiNVR 3 Central Control Server lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to remotely read or modify the central control server’s database, as well as perform operations o...

SQL Injection Vulnerability in One Card Communication Service Client of Xiondi Co.

The XIONGDY Technology OneCard Communication Service Client is a one-card management system of XIONGDY Co. A SQL injection vulnerability exists in the One Card Communication Service Client of Xiondi Corporation. An attacker can exploit the vulnerability to obtain sensitive information from the...

SQL Injection Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.(CNVD-2020-33072)

Digital campus is based on digital information and network, established on computer and network technology for the collection, processing, integration, storage, transmission and application of campus information on teaching, scientific research, management, technical services, life services, etc....

CVE-2020-3184

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates...

SQL Injection Vulnerability in Stone Technology Online Exam System kg***_ks***.php Page

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores. A...

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant wl***_gl***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the wlgl.p...

SQL Injection Vulnerability in Complaint Management System

Complaint Management System is a PHP project that allows complaints to be requested through an online service. The system is built using PHP, HTML, MYSQLi and Javascript. The Complaint Management System suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain...

SQL Injection Vulnerability in Haiwell's Cloud SCADA Cloud Configuration Software

Haiwell Haiwell cloud configuration software Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. A SQL injection vulnerability exists in Haiwell Cloud SCADA, which can be exploited by an attacker to obtain sensitive...

SQL Injection Vulnerability in Runge Marking System

Chengdu R&G Unlimited Technology Co., Ltd. is a company engaged in the research and development, sales of computer hardware and software, electronic products and provide technical services, technical consulting. A SQL injection vulnerability exists in the Runge Marking System, which can be...

SQL Injection Vulnerability in Huaxia Chemical Website Building System (CNVD-2020-32350)

Huaxia Chemical Network was founded in 2000, is founded by Shanghai Danfan Network Technology Co., Ltd, is for the chemical industry to provide security, high efficiency, multi-functional, systematic supporting B2B e-commerce platform of professional website. Huaxia Chemical website building syst...

CVE-2020-11006

CVE-2020-11006 affects Shopizer prior to 2.11.0, where a script can be injected and stored in the database, then executed on backend fetch. Root cause is input/script injection into data persisted by the application; this is mitigated by upgrading to version 2.11.0 or later. Reports in connected ...

CVE-2020-12687

CVE-2020-12687 affects Serpico prior to 1.3.3. The /admin/attacments_backup endpoint may be accessed by non-admin authenticated users, allowing retrieval of all user attachments (including administrator data). Red Hat, CNVD, OSV, and other sources corroborate this information. A fix is available ...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2020-32338)

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Shining Networks Virtual Goods Auto-Shipping System (Ship 100)

Virtual Goods Autoship System Ship 100 is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in Shining Networks Virtual Goods Auto Shipment System Shipment 100, which can be exploited by attackers to obtain sensitive information from the database...

Rukovoditel SQL Injection Vulnerability (CNVD-2020-26837)

Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management , customer relationship management and other functions . A SQL injection vulnerability exists in Rukovoditel version 2.5.2. The vulnerability stems from a lack ...

The vulnerability of the sqlite3WindowRewrite function in the SQLite database management system, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the sqlite3WindowRewrite function in the SQLite database management system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Gaming controllers manufacturer exposed 1.1M customer records

By Sudais Asif The company, a known manufacturer of gaming controllers and other accessories had left the database exposed to malicious actors without any security authentication. This is a post from HackRead.com Read the original post: Gaming controllers manufacturer exposed 1.1M customer record...

Unauthorized Access

mysql is vulnerable to unauthorized access. MySQL allowed remote authenticated users to create or access a database when the database name differed only in case from a database for which they had permissions...