3898 matches found
Automattic: [intensedebate.com] SQL Injection Time Based on /changeReplaceOpt.php
Summary Hello, i have found a SQLI Injection Time Based on https://www.intensedebate.com/changeReplaceOpt.php. The parameter $GET'acctid' is vulnerable. Detection I have inject a MySQL function sleep, and it works. GET /changeReplaceOpt.php?&opt=1&acctid=419523%20AND%20SLEEP15 HTTP/1.1 Host:...
UFIDA NC suffers from SQL injection vulnerability (CNVD-2020-69451)
UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from the database...
VMware VMWare SD-WAN Orchestrator SQL Injection Vulnerability
VMware VMWare SD-WAN Orchestrator is a software for orchestrating network data flows in a software-defined network architecture. A SQL injection vulnerability exists in VMware VMWare SD-WAN Orchestrator, which can be exploited by a remote attacker to submit a special SQL request to manipulate a...
SQL Injection Vulnerability in the Website Building System of Xiamen Intelligent Technology Co.
Ltd. is located in the beautiful scenery of the ancient city of Xi'an, Shaanxi Province, with a registered capital of 10 million yuan RMB, is a high-tech enterprise integrating development, manufacturing, sales and service. Ltd. building system there are SQL injection vulnerabilities, attackers c...
Shijiazhuang Renaud Network Technology Co., Ltd. building system SQL injection vulnerability
Shijiazhuang Renaud Network Technology Co., Ltd. was founded in 2008, 12 years focusing on the application of Internet and information technology to help China's economic transformation and upgrading. Shijiazhuang Renaud Network Technology Co., Ltd. building system there are SQL injection...
SQL Injection Vulnerability in FE Business Assistance Platform (CNVD-2020-69477)
Zhuhai Feiqi Software Co., Ltd "Feiqi Software", founded in 1998 formerly Zhuhai UFIDA Software Co., Ltd. was founded in 1998, is a software vendor focusing on the research, development and service of industry collaboration and integration platform. A SQL injection vulnerability exists in FE...
Cisco IoT Field Network Director SQL Injection Vulnerability
Cisco IoT Field Network Director IoT-FND is an end-to-end IoT management system from Cisco USA. The system features device management, asset tracking and smart metering. Cisco IoT Field Network Director suffers from a SQL injection vulnerability that results from insufficient input validation of...
Vmware VMWare SD-WAN Orchestrator SQL注入漏洞
VMware VMWare SD-WAN Orchestrator is a software for orchestrating network data flows in a software-defined network architecture. A SQL injection vulnerability exists in VMware VMWare SD-WAN Orchestrator, which can be exploited by a remote attacker to submit a special SQL request to manipulate a...
Input validation
A vulnerability in the REST API of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to an affected device. ...
CVE-2020-26075 Cisco IoT Field Network REST API Insufficient Input Validation Vulnerability
A vulnerability in the REST API of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to an affected device. ...
Cisco IoT Field Network REST API Insufficient Input Validation Vulnerability
A vulnerability in the REST API of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to an affected device. ...
Cisco IoT Field Network Director SQL注入漏洞
Cisco IoT Field Network Director IoT-FND is an end-to-end IoT management system from Cisco USA. The system features device management, asset tracking and smart metering. Cisco IoT Field Network Director suffers from a SQL injection vulnerability that results from insufficient input validation of...
SQL Injection Vulnerability in Website Building System of Nantong Dot Cool Network Technology Co.
Nantong Dot Cool Network Technology Co., Ltd. is a company that provides perfect industry website construction solutions for group enterprises and listed companies. There is a SQL injection vulnerability in the website building system of Nantong Dot Cool Network Technology Co., Ltd, which can be...
SQL Injection Vulnerability in Waychar Enrollment System's Password Retrieval Function
Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the retrieve password function of the waychar registration system, which can be exploited by an attacker to obtain sensitive information from the database...
SQL injection vulnerability in ad***_ed***.php file of Miku CMS movie and TV system background
Miku CMS Movie & TV System is a movie & TV management system designed for different needs of webmasters. A SQL injection vulnerability exists in the aded.php file in the background of Miku CMS. Attackers can use the vulnerability to obtain sensitive information in the database...
SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend us***.php Page
Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...
SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend ad***_in***.php Page
Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...
openGauss: Setting user for host Entries in the pg_hba.conf File
If user is set to all for host entries, any users are allowed to access the database. You are advised to set user for host entries to the user who needs to connect to the database. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and ar...
Moderate: Red Hat Security Advisory: unixODBC security update
An update for unixODBC is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2020-27019
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 is vulnerable to an information disclosure vulnerability which could allow an attacker to access a specific database and key...