SQL Injection Vulnerability in Ocean CMS Backend ad***_vi***.php File

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. There is a SQL injection vulnerability in the advi.php file in the background of Ocean CMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL injection vulnerability in the us***.php page of BaiLian Mall system

BaiLian mall system is a set of computer version of the mall + mobile version of the website + micro-mall enterprise weibo public number secondary development + BaiLian bearing network www.bearing.cn professional promotion and publicity in one of the new marketing solutions. SQL injection...

SQL Injection Vulnerability in pr***.asp Page of Shanghai Silverfox Information Technology Co.

Shanghai Silver Fox Information Technology Co., Ltd Silver Fox Power is a high-tech company dedicated to enterprise information technology services. Shanghai Silverfox Information Technology Co., Ltd. building system pr.asp page SQL injection vulnerability exists. Attackers can use the...

SQL Injection Vulnerability in Panmicro e-cology OA System

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...

Default credentials

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

CVE-2019-7488

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

SQL Injection Vulnerability in Hula Enterprise Website Management System of Qingdao Scorch Culture Media Co.

Hula enterprise website management system is based on ThinkPHP5 framework development, security and efficiency, including all the features of ThinkPHP5. Qingdao Scorch Culture Media Co., Ltd. Hula enterprise website management system has a SQL injection vulnerability, which can be exploited by...

Zhengzhou Rui Ma Technology Co., Ltd. website building system SQL injection vulnerability

Zhengzhou Rui Ma Technology specializes in providing Zhengzhou website construction, Zhengzhou website production, Zhengzhou website promotion, Zhengzhou website optimization, Zhengzhou seo optimization, Zhengzhou promotion software. Zhengzhou Rui Ma Technology Co., Ltd. website building system...

SQL Injection Vulnerability in the Website Building System of Beijing Transcend Infinite Information Technology Co.

Beijing Beyond Unlimited Information Technology Co. SQL injection vulnerability exists in the website building system of Beijing Beyond Infinity Information Technology Co. An attacker can utilize the vulnerability to obtain sensitive information of the database...

SQL Injection Vulnerability in the Website Building System of Jingteng Multimedia Co.

With the marketing planning and project manager system, Jingteng Multimedia Co., Ltd. analyzes customers' strengths and provides users with exclusive suggestions for website setup. A SQL injection vulnerability exists in the website builder system of Jinteng Multimedia Co. An attacker can exploit...

DEBIAN-CVE-2019-19830

core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...

SQL Injection Vulnerability in the Website Building System of Guangzhou HeYou Network Technology Co.

Guangzhou HY Network Technology Co., Ltd. is a comprehensive enterprise specializing in providing customers with a series of corporate services such as website, mailbox, advertising, software, finance and tax. There is a SQL injection vulnerability in the website builder system of Guangzhou Hopef...

SQL Injection Bypass Vulnerability in Web Security Dog (Apache Edition)

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition suffers from a SQL injection bypass vulnerability. Attackers use the vulnerability to bypa...

SQL Injection Vulnerability in Yunye CMS Backend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

CVE-2019-12414

In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab...

CVE-2019-12413

CVE-2019-12413 affects Apache Superset prior to 0.31. A crafted complex query allows a user to query database metadata they have no access to, revealing information via an information-disclosure vulnerability. The available sources consistently describe this as a metadata/information-disclosure i...

SQL Injection Vulnerability in UQCMS Cloud Business System ca***.cl***.php Page

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. UQCMS cloud business system ca.cl.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Catapult OA Mobile Cloud Office System

Catapult OA mobile cloud office system, the use of industry-leading cloud computing technology, based on the traditional Internet and mobile Internet, innovative cloud services + cloud terminal application mode, for enterprise users to provide an account management aggregation application service...

TuziCMS 2.0.6 SQL injection vulnerability in frontend mo*** us***.cl***.php

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS 2.0.6 SQL injection vulnerability exists in the front-end mo us.cl.php, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in PM2 Project Management System of Beijing Bangyong Technology Co.

BONYON is committed to project management research and development, integrating project management consulting, software development, project management training and education as one of the professional foreign-funded companies. The PM2 project management system of Beijing BangYong Technology Co.,...