SQL Injection Vulnerability in the Website Building System of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a comprehensive network technology company founded on website construction, software development and promotion marketing. There are SQL injection loopholes in the website construction system of Henan Leaping Dragon Gate Technology Co., Ltd. which can be...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2020-25586)

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Guangzhou Changmeng Network Website Building System

Guangzhou Changmeng Network is a team that provides website construction, website promotion and network marketing solutions under the banner of Guangzhou Xingmeng Animation Design Company Limited a total of three departments: Animation Department, Product Design Department former Good Design Stud...

Micro Focus Service Manager Automation SQL Injection Vulnerability

Micro Focus Service Manager is a suite of service desk software from Micro Focus UK. The software supports the deployment of a comprehensive IT service management ITSM system and standardizes management processes. A SQL injection vulnerability exists in Micro Focus SMA. The vulnerability stems fr...

CVE-2019-12122

An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected...

Default credentials

An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected...

CVE-2019-12122

An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected...

CVE-2020-1720

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issu...

SQL Injection Vulnerability in EjuCMS Frontend of Hainan Eju Technology Co.

Eju real estate system EjuCMS is a set of localized O2O real estate website platform system, users can quickly find their own suitable real estate, real estate agents to promote their own exclusive sale of properties and so on. Ltd. EjuCMS front-end SQL injection vulnerability, attackers can use...

SQL injection vulnerability in co***.php page of Yantai Cloud Pulse Network Technology Co.

Yantai Cloud Pulse Network Technology Co., Ltd. is a professional website construction and search engine marketing services provider. Dedicated to small and medium-sized enterprises network marketing services, and website construction, enterprise version of the PC website construction, three-in-o...

SQL Injection Vulnerability in Website Building System of Hainan Liantuo Technology Co.

Ltd. is engaged in network marketing research and development of high-tech enterprises, long-term commitment to government agencies, enterprises and institutions, schools, Internet platform construction and promotion, to provide customers with a full range of solutions for website construction,...

Yubico YubiKey Validation Server SQL Injection Vulnerability (CNVD-2020-16073)

Yubico YubiKey Validation Server is an authentication server from the Swedish company Yubico. A SQL injection vulnerability exists in YubiKey Validation Server versions prior to 2.40. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

SQL injection vulnerability in website building system li***.php page of Daqing Jiujiu Network Technology Co.

Daqing JiuJiu Network Technology Co., Ltd. is a technology-based service enterprise diversified in the field of full network marketing, enterprise e-commerce, network information technology services. Daqing JiuJiu Network Technology Co., Ltd. building system li.php page SQL injection vulnerabilit...

Sentrifugo HRMS 3.2 - 'id' SQL Injection

Exploit Title: Sentrifugo HRMS 3.2 - 'id' SQL Injection Exploit Author: minhnb Website: Date: 2020-03-06 Google Dork: N/A Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version: 3.2 and possibly before Patched Version: unpatched Category: Web Applicatio...

Sentrifugo HRMS 3.2 - (id) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Sentrifugo HRMS 3.2 - 'id' SQL Injection Exploit Author: minhnb Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version: 3.2 and possibly before Patched Version: unpatched Category: Web...

Yubico YubiKey Validation Server SQL Injection Vulnerability

Yubico YubiKey Validation Server is an authentication server from the Swedish company Yubico. A SQL injection vulnerability exists in YubiKey Validation Server versions prior to 2.40. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

SQL Injection Vulnerability in Jinwei Smart Restaurant System (CNVD-2020-21995)

Jinwei Smart Restaurant is truly free restaurant management software. Suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, Western food, hot pot restaurant and other kinds of catering business. Jinwei intelligent restaurant system SQL injection vulnerability,...

SQL Injection Vulnerability in Jinwei Smart Restaurant System (CNVD-2020-22268)

Jinwei Intelligent Restaurant System is an internal management system for all major and small restaurants. Jinwei Intelligent Restaurant System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2019-4669

IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business Automation Workflow 18.0.0.1 through 19.0.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, ad...

CVE-2019-4669

IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business Automation Workflow 18.0.0.1 through 19.0.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, ad...