SQL Injection Vulnerability in ThinkLC Classifieds Information System template.php Page

ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the template.php page of ThinkLC Classified Information System. It allows attackers to exploit the vulnerability to gain access to sensitive...

SQL Injection Vulnerability in SaxueArticle Article Management System artcle.php Page

SaxueArticle article management system is a php+MySQL for the development of php article management system. SaxueArticle article management system artcle.php page SQL injection vulnerability, the vulnerability stems from the program on the user to provide input is not sufficiently filtered, an...

SQL Injection Vulnerability in SaxueArticle Article Management System Expand.php Page

SaxueArticle article management system is a php+MySQL for the development of php article management system. SaxueArticle article management system expand.php page SQL injection vulnerability, the vulnerability stems from the program on the user to provide input is not sufficiently filtered, an...

SQL injection vulnerability in shownews.hb page of website building system of Jiangxi Huabang Media Co.

Jiangxi Huabang Media Co., Ltd. is a comprehensive IT company integrating enterprise informationization construction, network development and Internet marketing. There is a SQL injection vulnerability in the shownews.hb page of the website building system of Jiangxi Huabang Media Co. The...

SQL Injection Vulnerability in News.asp Page of Frontier Technology Website Building System

Zaozhuang Frontier Technology Co., Ltd. is a technology enterprise engaged in software technology services. A SQL injection vulnerability exists in the news.asp page of Frontier Technology's website construction system. An attacker can exploit this vulnerability to obtain sensitive information fr...

SQL Injection Vulnerability in EML Enterprise Address Book Management System action.link.php file

EML enterprise customer relationship management system is based on Linux open kernel and Apache based Php + Mysql intelligent B / S interactive service system. A SQL injection vulnerability exists in the EML Enterprise Contact Management System action.link.php file. An attacker can exploit this...

SQL Injection Vulnerability in the Construction System of China's Small and Medium-sized Enterprises Heilongjiang Network

Heilongjiang Provincial SME Technology Innovation Service Center is approved by the State Science and Technology Commission and the Provincial Editorial Committee to provide public welfare and supportive technology services for SMEs as a financial full-budget appropriation institution. China's...

SQL Injection Vulnerability in Fire Safety Cadastralized Management System for Social Units

The fire safety household management system of social units is a special software for fire management developed by the Public Security Fire Bureau and promoted by the provincial fire brigades to help the public security fire departments and units to better organize and carry out fire safety work,...

OpenEMR elevation of privilege vulnerability (CNVD-2017-35899)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An elevation of privilege vulnerability exists in versions of OpenEMR pri...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2017:2921-1)

This update for mariadb fixes several issues. These security issues were fixed : - CVE-2017-3636: Client programs had an unspecified vulnerability that could lead to unauthorized access and denial of service bsc1049399 - CVE-2017-3641: DDL unspecified vulnerability could lead to denial of service...

SQL Injection Vulnerability in Royal 100 E-commerce System

Shenzhen Royal Network Technology Co., Ltd. provides e-commerce enterprises and e-commerce logistics enterprises with enterprise-level e-commerce logistics system and supply chain consulting, design, development and technical operation and maintenance support services. A SQL injection vulnerabili...

SUSE-SU-2017:2921-1 Security update for mariadb

This update for mariadb fixes several issues. These security issues were fixed: - CVE-2017-3636: Client programs had an unspecified vulnerability that could lead to unauthorized access and denial of service bsc1049399 - CVE-2017-3641: DDL unspecified vulnerability could lead to denial of service...

SQL injection vulnerability in article.php page of Lianya website builder system

Guangzhou Lianya Network Technology Co., Ltd. is a professional and technical network company, based on website construction, providing domain name registration, web hosting, enterprise post office, website planning, web design, system development, website promotion, website maintenance and other...

YxtCMF v3.1.0 SQL Injection Vulnerability in Frontend ShitiController.class.php Page

YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. YxtCMF v3.1.0 has a SQL injection vulnerability in the frontend ShitiController.class.php page. An attacker can exploit this vulnerability to obtain sensitive...

SQL Injection Vulnerability in School Worry-free Personnel Payroll System v2.5

The School Worry-Free Personnel Payroll System is a general-purpose dynamic personnel payroll management software. A SQL injection vulnerability exists in School Worry-Free Personnel Payroll System v2.5, which can be exploited by an attacker to access or modify database data due to insufficient...

Multiple Vulnerabilities in CwCMS v1.0

CwCMS is an enterprise website management system. CwCMS v1.0 has SQL injection and file upload vulnerabilities in several files, which can be exploited by attackers to obtain sensitive information from the database and gain administrative privileges on the server...

SQL Injection Vulnerability in State Micro CMS opinion-wzxz

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. A SQL injection vulnerability exists in State Micro CMS opinion-wzxz. An attacker can exploit this vulnerability to obtain sensitive...

UBUNTU-CVE-2017-14990

WordPress 4.8.2 stores cleartext wpsignups.activationkey values but stores the analogous wpusers.useractivationkey values as hashes, which might make it easier for remote attackers to hijack unactivated user accounts by leveraging database read access such as access gained through an unspecified...

SQL Injection Vulnerability in the change_store_num Method of WK+shop General Mall System

WK+shop is a mall system based on the technology of PHP+MySQL, developed using ThinkPHP5.0 framework, which combines the Witcott mission system with multiple mall systems. WK+shop general mall system changestorenum method has a SQL injection vulnerability, attackers can construct a specific URL t...

WordPress Content Timeline Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Content Timeline plugin. An attacker can exploit the vulnerability to...