CVE-2019-4597

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 167880...

Sql injection

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 167880...

Changzhou Qingzhifeng Network Technology Co., Ltd. Zhimei cloud station building system has SQL injection vulnerabilities

Qingzhifeng Network Technology Co., Ltd. is a high-tech company operated by Qingfeng Network Group in Jiangsu region with network service as the main business. Changzhou Qingzhifeng Network Technology Co., Ltd. Zhimei cloud station building system SQL injection vulnerability, attackers can use th...

IBM DB2 Buffer Overflow Vulnerability (CNVD-2020-10506)

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A buffer overflow vulnerability exists in IBM DB2 including DB2 Connect Server that originates from th...

IBM DB2 Denial of Service Vulnerability (CNVD-2020-13054)

IBM DB2 is a set of relational database management system of American IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2 version V11.5. An attacker can exploit this vulnerability to cause an...

Sql injection

A vulnerability in the web UI of Cisco Cloud Web Security CWS could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web-based management interface improperly validates SQL values. An authenticated attacker could exploit this...

SQL Injection Vulnerability in SemCMS SE***_Im***.php File

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEIm.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...

EyesOfNetwork API SQL Injection Vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. A SQL injection vulnerability exists in the EyesOfNetwork API that stems from ...

SQL Injection Vulnerability in ZhiCms Backend

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2020-3937

SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database...

CVE-2020-7934

The CVE-2020-7934 entry describes a stored XSS vulnerability in LifeRay Portal CE 7.1.0–7.2.1 GA2, specifically in the MyAccountPortlet where First Name, Middle Name, and Last Name fields can be altered by an attacker and the payload is stored in the database. The malicious data is rendered when ...

The vulnerability of the db2pdcfg command implementation in the IBM DB2 database management system allows a attacker to execute arbitrary code.

The vulnerability of the db2pdcfg command in the IBM DB2 database management system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2019-16153

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

Code injection

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database...

CVE-2019-19859

The CVE-2019-19859 entry concerns Serpico (SimplE RePort wrIting and CollaboratiOn tool) version 1.3.0. The vulnerability is described as an input validation error in the Add Collaborator feature, where the author parameter allows unlimited data to be submitted even if it does not match existing ...

OpServices OpMon SQL Injection Vulnerability

OpServices is the technology used to manage and monitor IT environments. In addition to monitoring any device that generates data in real time, it is also possible to create business data visualizations. OpServices OpMon SQL injection vulnerability can be exploited by attackers to gain access to...

phpMyAdmin SQL Injection Vulnerability (CNVD-2020-02540)

phpMyAdmin is a free, web-based MySQL database management tool from the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A SQL injection vulnerability exists in phpMyAdmin. The...

SQL Injection Vulnerability in Qixing Helpdesk kb***_ca***.aspx Interface

Kaixin HelpdeskHelpdesk is a system for dealing with day-to-day issues that helps IT collect the issues it deals with on a daily basis and generate reports to quantify the work. A SQL injection vulnerability exists in the kbca.aspx interface of Qixing Helpdesk, which can be exploited by attackers...

SQL Injection Vulnerability in Shanghai Silverfox Information Technology Co.

Shanghai Silver Fox Information Technology Co., Ltd Silver Fox Power is a high-tech company dedicated to enterprise information technology services. Shanghai Silverfox Information Technology Co., Ltd. station building system has a generic SQL injection vulnerability, attackers can use the...

The vulnerability of the IBM DB2 database management system, related to privilege management errors, allows a perpetrator to elevate their privileges.

The vulnerability of the IBM DB2 database management system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...