3898 matches found
BlueCMS suffers from SQL injection vulnerability (CNVD-2021-37563)
BlueCMS is a free professional local portal system developed by open source combination PHP + MYSQL. BlueCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
Uncontrolled Resource Consumption
JPA Server in HAPI FHIR allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are many...
SQL Injection Vulnerability in Water Information Management Platform of Shandong Weimicro Technology Co. Ltd (CNVD-2021-35806)
Shandong Weimicro Technology Co., Ltd. is a private scientific research institution mainly engaged in technology development. Ltd. water information management platform, there is a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information in the database...
OURPHP suffers from SQL injection vulnerability (CNVD-2021-34777)
OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in Website Building System of Yuanxin Technology (Stock) Company (CNVD-2021-35855)
Ltd. was founded in January, 2002 and is a total web planning, web design, web design, programming, web production, internet marketing, web hosting and related web design value-added services company. It is a company that provides total website planning, website design, web design, programming, w...
Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35850)
Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35843)
XIONGHAI CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35837)
Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in Hefei Chenguang Technology Website Building System
Hefei Chenguang Technology is a company engaged in website construction and website production. Hefei Chenguang Technology website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34221)
Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34220)
Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34210)
Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34303)
Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34302)
Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34299)
Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2021-26830
SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...
Sql injection
SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...
CVE-2021-26830
SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...
CVE-2021-26830
The CVE-2021-26830 issue affects Tribalsystems Zenario CMS 8.8.52729, where a SQL Injection vulnerability exists in the Pugin library - delete path, via the ID input in ajax.php. The root cause is lack of input sanitization on the ID parameter, allowing remote attackers to access the database or ...
Zenario CMS SQL注入漏洞
Zenario CMS is a Zenario open source application . Provides a web-based content management system. A security vulnerability exists in Zenario CMS 8.8.52729 SQL Injection, which allows remote attackers to exploit the vulnerability to access the database or remove plugins...