See how I in Switzerland's largest hosting providers in the system found a database disclosure vulnerability-vulnerability warning-the black bar safety net

! In the development of our latest security SaaS process, the product allows any user to test their server security level, we on our own site were detected. Since the site is hosted on Switzerland's largest hosting provider of taking into account the relevant legal issues, this article for the ti...

SQL Injection Vulnerability in Vanguard Digitizing System

Vanguard Digital Technology Inc. provides web animation, graphic visual design, online advertising and marketing, and multimedia CD-ROM production services. A SQL injection vulnerability exists in the Vanguard Digital Web Building System. An attacker can exploit the vulnerability to obtain...

SQL injection vulnerability in news_show.asp page of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion and development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the network company. There is a SQL injection vulnerability in the newsshow.asp page of Chengdu Firefo...

SQL Injection Vulnerability in Amoy AspCMS v6.5

Taote AspCMS is a set of ASP-based content management system developed by Taote.com on the basis of its own platform and with reference to the features of excellent CMS at home and abroad. SQL injection vulnerability exists in Taote AspCMS v6.5, which can be exploited by attackers to obtain...

Design/Logic Flaw

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

CVE-2018-5477

The ABB netCADOPS Web Application (versions 3.4 and prior, 7.1 and prior, 7.2x and prior, 8.0 and prior, 8.1 and prior) contains an information exposure vulnerability in the password entry section that can expose critical database information. Source advisories (NVD/CVE-2018-5477; ICSA-18-051-01)...

SQL Injection Vulnerability in CMS of Shanghai Seek Creative Technology Co.

Ltd. specializes in providing customers with high-end website planning, website construction, website design, brand network marketing and related Internet-based application services. A SQL injection vulnerability exists in the CMS of Shanghai Seek Creative Technology Co., Ltd, which can be...

Damon Database Vulnerability for Overstepping Authority and Tampering with Data

DM7 is a new-generation database product designed by Damon on the basis of summarizing the R&D and application experience of DM series products, absorbing the advantages of mainstream database products, and adopting JAVA-like virtual machine technology. DM7 database has the vulnerability of...

CVE-2017-15546

The Security Console in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier is affected by a blind SQL injection vulnerability. Authenticated malicious users could potentially exploit this vulnerability to read any unencrypted data from the database...

SQL Injection Vulnerability in Website Building System of Fuyang Xinpin Network Technology Co.

Fuyang City Xinpin Network Technology Co., Ltd. is a technology-based enterprise focusing on providing full network marketing solutions for the majority of tourism enterprises. The search.aspx file in the website building system of Fuyang Xinpin Network Technology Co., Ltd. has a SQL injection...

SQL Injection Vulnerability in Yitianlian's Website Building System

Shenzhen Yitianlian Technology Co., Ltd. is a network operator providing professional network marketing services for enterprises. A SQL injection vulnerability exists in the Yitianlian Technology website builder system. Allow attackers to exploit the vulnerability to obtain sensitive information ...

CVE-2018-0758

creationtimestamp| type| source ---|---|--- 2018-01-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43491...

Gespage 7.4.8 - SQL Injection

CVE-2017-7997 Gespage SQL Injection vulnerability Description Gespage is a web solution providing a printer portal. Official Website: http://www.gespage.com/ The web application does not properly filter several parameters sent by users, allowing authenticated SQL code injection Stacked Queries -...

SQL Injection Vulnerability in UQCMS Cloud Business B2B2C Multi-store System ad.class.php Page

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. A SQL injection vulnerability exists in the ad.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System due to the program's failure to adequately filter...

Quest NetVault Backup 'NVBUBackupOptionSet Get' Method SQL Injection Vulnerability

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. An SQL injection vulnerability exists in the handling of NVBUBackupOptionSet Get method requests in Quest NetVault Backup, which stems from the program failing to properly validate user-submitted strings before...

SQL Injection Vulnerability in Fengteng E-commerce Website Building System

Harbin Fengteng E-commerce Co., Ltd. is a company that provides customized website construction solutions integrating website planning, design, interaction and production, and program development. A SQL injection vulnerability exists in the Fengteng e-commerce website builder system. The...

NiuShop open source mall system Goods.php page SQL injection vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShop open source mall system Goods.php page SQL injection vulnerability , attackers can exploit the...

CVE-2017-12364

Cisco Prime Service Catalog (PSC) Web Framework contains a SQL Injection flaw where unsanitized user input used in SQL queries allows an unauthenticated remote attacker to read data from database tables. This is detailed in CVE-2017-12364 with Cisco Bug CSCvg30333; related advisories include Cisc...

JVN#78501037: Movable Type plugin A-Member and A-Reserve vulnerable to SQL injection

A-Member and A-Reserve provided by ARK-Web co., ltd. are plugins for Movable Type which provide functions to build a membership website or a reservation website. A-Member and A-Reserve contain SQL injection CWE-89 vulnerability due to the issue in processing cookie values. Impact An attacker who...