SQL Injection Vulnerability in Hongting Financial CRM Customer Management Software

Hongting Financial CRM Customer Management Software is a sales management platform that provides the most advanced and comprehensive sales management solution for business users. A SQL injection vulnerability exists in Hanting Financial CRM Customer Management Software, which can be exploited by...

CVE-2018-1812

IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting, caused by missing escaping of a database field. An attacker that has access to the Control Room database could exploit this vulnerability to execute script in a victim's web...

CVE-2018-1812

IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting, caused by missing escaping of a database field. An attacker that has access to the Control Room database could exploit this vulnerability to execute script in a victim's web...

elephant.se XSS vulnerability

Open Bug Bounty ID: OBB-678847 Description| Value ---|--- Affected Website:| elephant.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-17092

An issue was discovered in DonLinkage 6.6.8. SQL injection in /pages/proxy/php.php and /pages/proxy/add.php can be exploited via specially crafted input, allowing an attacker to obtain information from a database. The vulnerability can only be triggered by an authorized user...

CVE-2018-17092

Summary: DonLinkage 6.6.8 is affected by a SQL injection in the /pages/proxy/php.php and /pages/proxy/add.php endpoints. The vulnerability allows an attacker to obtain information from the database when input is specially crafted. The attack can only be triggered by an authorized user, per the di...

SQL Injection

express-cart is vulnerable to SQL injection. A lack of user input sanitization in the login handlers allow attackers to inject MongoDB queries through the customer and admin login parameters. The vulnerability could be exploited to retrieve or modify arbitrary entries in the database...

PostgreSQL SQL Injection Vulnerability (CNVD-2020-02199)

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A SQL injection vulnerability exists in PostgreSQL. The vulnerabili...

SQL Injection Vulnerability in Vantage Network's Website Building System

Taixing Jingchuang Network is a company that provides enterprise Internet application services. A SQL injection vulnerability exists in the website builder system of Jingchuang Network, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Nanjing DotMo Network Technology Co.

Nanjing dot ink network technology Co., Ltd. to provide brand website design and production, mall program custom development, APP development, WeChat secondary development services, development of independent intellectual property rights of the mall system and CMS system. There is a SQL injection...

CVE-2016-8640

A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL at least it is possible to perform updates/inserts/deletes and database...

SQL Injection Vulnerability in Beijing Yizaitong Information Technology Co.

Beijing Yizaitong Information Technology Co., Ltd. has been committed to enterprise procurement information technology, procurement consulting field, oriented to procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain,...

Weak Password Vulnerability in Tianxing Security One-way Import System Database

Tianxing Security One-way Import System is a network security product of Beijing Tianxing Net Security Information Technology Co., Ltd. for one-way data transmission across security domains. The product consists of importing preamplifier PAS and importing server IAS, which can provide a...

The vulnerability of the Java DB component of the Java SE software platform allows a perpetrator to gain full control over the application.

The vulnerability of the Java DB component of the Java SE software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using network protocols...

Samsung SmartThings Hub video-core Database shard.videoHostURL Code Execution Vulnerability

Summary An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core’s HTTP server of Samsung SmartThings Hub. The video-core process insecurely extracts the shard.videoHostURL field from its SQLite database, leading to a buffer overflow on th...

Unspecified Vulnerability in Oracle Retail Applications MICROS Retail-J Component

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. MICROS Retail-J is one of the advanced retail system components. A security vulnerability exists in the Database subcomponent of the MICROS Retail-J component of Oracle Retail...

CVE-2018-2881

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Database. Supported versions that are affected are 11.0.x, 12.0.x, 12.1.x, 12.1.1.x, 12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-10197

There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET...

Elektronischer Leitz-Ordner 10 - SQL Injection Vulnerability

Exploit for linux platform in category web applications Title: Elektronischer Leitz-Ordner 10 - SQL Injection Author: Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG Software: https://www.elo.com/en-de/ CVE: N/A Affected Products: ELOenterprise 10 ELO Access Manager = 10.17.120...

CVE-2018-12977

CVE-2018-12977: A SQL injection vulnerability in SoftExpert Excellence Suite 2.0 allows remote authenticated users to pull information from the database via the cddocument parameter in the Downloading Electronic Documents section. The NVD metrics indicate CVSSv3.0 base score 8.8 (HIGH) with NETWO...