2881 matches found
CVE-2019-2955
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS...
idreamsoft iCMS spider_project.admincp.php file SQL injection vulnerability
idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the spiderproject.admincp.php file in idreamsoft iCMS version 7.0.14. The vulnerability stems from a lack of validation of externally entered SQL statements in...
SQL Injection Vulnerability in Air Quality System Publishing System
Zhuhai Goling Information Technology Co., Ltd. is a high-tech enterprise engaged in research and development of core technology of information network, production of professional equipment and network application service. An SQL injection vulnerability exists in the Air Quality System Publishing...
SQL Injection Vulnerability in Panmicro oa e-cology8 mo*** Component
Panmicro collaborative management application platform e-cology is a set of collaborative business platform. A SQL injection vulnerability exists in the Panmicro oa e-cology8 mo component, which can be exploited by an attacker to obtain sensitive information from a database...
Centreon SQL Injection Vulnerability
Centreon Merethis Centreon is an open source IT monitoring software package from Centreon France that needs to be used with Nagios. The software enables the management of Nagios via the Web, as well as the monitoring of networks, operating systems and applications via third-party components. A SQ...
Vulnerability of the Server component: The “libmysqld” component of the MySQL Server database management system, which allows attackers to disclose sensitive information.
The vulnerability of the Server component, “libmysqld” of the MySQL Server database management system, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to disclose sensitive information...
SQL injection vulnerability in p***w.asp page of basic website building system of Shenzhen Tiandixin Network Technology Co.
Tiandixin network was founded in 2010, is a strategic research and development-oriented enterprises, many large-scale project experience, more than tens of thousands of Chinese enterprises common choice of website platform builder, the company mainly focuses on corporate website construction, Bai...
SQL Injection Vulnerability in the PHP Website Builder System ne***.php at Shanghai Enterprise Torch Advertising Media Co.
Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...
CVE-2019-16656
joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the database...
Code injection
joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the database...
FlameCMS login.php file SQL injection vulnerability
FlameCMS is an open source PHP-based content management system CMS. A SQL injection vulnerability exists in the account/login.php file in FlameCMS version 3.3.5. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can...
WordPress zm-gallery plugin SQL injection vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in version 1.0 of the WordPress zm-gallery plugin. The vulnerability stem...
Jobberbase SQL Injection Vulnerability
Jobberbase is an open source platform for building job search websites. A SQL injection vulnerability exists in Jobberbase version 2.0, which can be exploited by attackers to execute illegal SQL commands...
IBM DB2 High Performance Unload Elevation of Privilege Vulnerability
IBM DB2, etc. are products of IBM Corporation in the U.S.A. DB2 is a relational database management system.Opera Software Opera, etc. are products of Norway's Opera Software.Opera is a Web browser and IBM DB2 is a relational database management system. An elevation of privilege vulnerability exis...
SQL Injection Vulnerability in Teaching Quality Assurance System of Shanghai Shangding Software Technology Co.
The Teaching Quality Assurance System is a closed-loop management system that adopts a new business architecture and process handling model for the planning and initiation, execution and implementation, analysis and feedback of various teaching quality activities. Shanghai Shangding Software...
SQL Injection Vulnerability in Octave Volunteer Service Management System
Shangrao Octave Impression Technology Co., Ltd. is mainly engaged in Internet application system development and Internet operation consulting services. An SQL injection vulnerability exists in the Octave Volunteer Service Management System. An attacker can utilize the vulnerability to obtain...
PT-2019-9041 · Yandex · Clickhouse
Name of the Vulnerable Software and Affected Versions: ClickHouse versions prior to 1.1.54131 Description: The issue is related to an incorrect configuration in the deb package, which could allow unauthorized use of the database. Recommendations: For versions prior to 1.1.54131, update to version...
mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 8.0.16 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks...
IBM Sterling File Gateway SQL Injection Vulnerability
IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. An SQL injection vulnerability exists in IBM Sterling File...