IBM DB2 Scalar Denial of Service Vulnerability

IBM DB2 is a set of relational database management system developed by IBM in the United States, and its main operating environments are UNIX including IBM's own AIX, Linux, IBM i formerly known as OS/400, z/OS, and Windows server versions. IBM DB2 has a security vulnerability that allows...

IBM DB2 XML/XSLT Function File Read Vulnerability

IBM DB2 is a set of relational database management system developed by IBM in the United States, and its main operating environments are UNIX including IBM's own AIX, Linux, IBM i formerly known as OS/400, z/OS, and Windows server versions. IBM DB2 has a security vulnerability that allows...

UBUNTU-CVE-2015-2641

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Privileges...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flow/freeflowimage_page.php Parameters

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flow/freeflowimagepage.php parameter, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Type Parameters of Land Resources Online Trading System of Kunming Yunjindi Technology Co.

The online trading system for land resources is a government sunshine project, supported by the Central Commission for Discipline Inspection CCDI, embraced by the people, and concerned by the society. A SQL injection vulnerability exists in the type parameter of the land resources online...

SQL Injection Vulnerability in the bgComments Parameter of the Online Exam System of Shenzhen Biaochi Information Technology Co.

Enterprise Huitong Shenzhen Biaochi Electronics Co., Ltd. network education and training platform is a set of learning management, knowledge management, interactive network learning system for enterprises, schools, training institutions. SQL injection vulnerability exists in the bgComments...

EQ Event Calendar Component SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other features . EQ Event Calendar is one of the event calendar component . A SQL injection vulnerability exists in the EQ Event Calendar...

SAP HANA DB Log Entry Forgery Vulnerability

SAP HANA DB is an in-memory database based on rows and columns. A security vulnerability in the grant.xsfunc application in the testApps/grantAccess/ URI in the SAP HANA DBXS Engine allows remote attackers to send specially crafted requests to forge logs...

WordPress GigPress Plugin 2.3.8 - SQL Injection

This WordPress GigPress plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Tune Library Plugin SQL Injection Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Tune Library is one of the plugin used to import XML iTunes music library files into the WordPress database. A SQL injection vulnerability exists in the...

SQL Injection Vulnerability in Asset Management Digital Platform of Jinan Guozi Digital Technology Co.

Jinan Guozi Digital Technology Co., Ltd. asset management digital platform is to provide all levels and types of schools and education authorities mature education and teaching management solutions. A SQL injection vulnerability exists in the Asset Management Digital Platform of Jinan Guozi Digit...

Hospira MedNet Hardcoded Password Vulnerability (CNVD-2015-02160)

MedNet manages drug libraries, firmware updates, and configurations for Hospira IV pumps for use in the healthcare and public health sectors. MedNet uses plain text stored passwords for the SQL database, which allows an attacker to compromise the MedNet SQL server and gain administrator access to...

CVE-2015-0981

SCADA Engine BACnet OPC Server prior to version 2.1.371.24 is affected by three vulnerabilities tied to the SOAP web interface: (1) CVE-2015-0981 Authentication bypass allowing remote read/write of database fields, (2) CWE-122 Heap-based Buffer Overflow, and (3) CWE-20 Improper Input Validation. ...

SQL Injection Vulnerability in the Collaboration Management System/c6/Jhsoft.Web.login/NewCList.aspx Page of Beijing Jinhe Network Co.

Beijing Jinhe Network Co., Ltd. collaborative management system, according to the precise management ideas guided by the 6C management concept design, the Internet technology, computer technology, Luan Runfeng's management concepts, Chinese culture, the four are closely integrated, the core of...

SQL Injection Vulnerability in Ticketing Software of Shanghai Shengdai Information Technology Co.

Ltd. Ticketing software is a special ticket management system for airline ticketing agents, integrating online booking management, telephone recording screen, corporate travel management, order management, membership management, points management, SMS sending, staff management, report generation,...

嘉缘人才系统sql注入

简要描述： rt 详细说明： 看到看到frcms\inc\ contacts.php if$companyid!=0 if$hireid!=0 $db -query"update $cfg'tbpre'hire set hvisitcount=hvisitcount+1 where hid=$hireid and hcomid=$companyid"; $goto=$cfg'path'."co/hire.php?id=$hireid"; $rs = $db-getone"select...

Clipbucket 2.7 RC3 0.9 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Clipbucket 2.7 RC3 0.9 Blind SQL Injection Date : 20 February 2015 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://clip-bucket.com/ Software Link :...

WordPress Web Dorado Spider Event Calendar Plugin 1.4.9 - SQL Injection

This Web Dorado Spider Event Calendar plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

Chamilo LMS 1.9.8 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Chamilo LMS 1.9.8 Blind SQL Injection Date: 06-12-2014 Software Link: http://www.chamilo.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1...

mysql: unspecified vulnerability related to Server:Security:Encryption (CPU Jan 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption...