PbootCMS V1.1.7 SQL Injection Vulnerability in Sl***.php Page

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 SQL injection vulnerability exists in Sl.php page. An attacker can exploit the vulnerability to obtain sensitive information in the database...

PbootCMS V1.1.7 SQL Injection Vulnerability in Li***.php Page

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Li.php page SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Shanghai Wuwu Laike Technology Co.

Shanghai Wuwu Laike Technology Co., Ltd. is an enterprise dedicated to Internet and mobile Internet services. There is a SQL injection vulnerability in the website builder system of Shanghai Wuwu Laike Technology Co. An attacker can exploit the vulnerability to obtain sensitive information from t...

SQL injection vulnerability in Ne***.asp page of website builder system of Guangzhou Hande Network Technology Co.

Ltd. is a network company specializing in Internet technology services, network technology development and application in one. A SQL injection vulnerability exists in the Ne.asp page of the website building system of Guangzhou HAND Network Technology Co. An attacker can use the vulnerability to...

SeedDMS SQL Injection Vulnerability

SeedDMS formerly known as LetoDMS and MyDMS is SeedDMS enthusiasts jointly developed a set of PHP and MySql-based open source document management system . The system is mainly used to store and share documents. A SQL injection vulnerability exists in the 'Users management' feature in SeedDMS...

SQL injection vulnerability in ac***.php page of PinYou Movie & TV website builder system

PinYou film and television station building system is a set of add video, with membership system, recharge system, is a set of film and television station can be charged to watch the source code. SQL injection vulnerability exists in the ac.php page of the PinYou Movie & TV website builder system...

Starbucks: Backup Source Code Detected

Impact Depending on the nature of the source code disclosed, an attacker can mount one or more of the following types of attacks:•Access the database or other data resources. With the privileges of the account obtained, attempt to read, update or delete arbitrary data from the database. •Access...

SQL Injection Vulnerability in the Website Building System of Taiyuan Guoyuantiancheng Network Technology Co.

Taiyuan Guoyuan Tiansheng Network Technology Co., Ltd. mainly provides enterprises with Baidu, 360 search engine clicks without deduction marketing promotion, APP custom development, Taobao Tmall Jingdong store operation and maintenance, WeChat public platform and small program development, PC,...

SQL Injection Vulnerability in the Website Building System of Shanghai AoS Network Technology Co.

Shanghai Avantage Network Technology Co., Ltd. provides website construction, mobile services, WeChat development, domain name registration, enterprise mailbox, cloud server, SMS marketing, 720 degree panoramic display, VI design and product photography services as the core business of small and...

ZZCMS 8.3 suffers from SQL Injection Vulnerability

zzcms is asp language to do free open-source website building system, mainly facing the majority of webmasters to use. ZZCMS website builder system 8.3 SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

CVE-2017-3183

Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions. Sage XRT Treasury is a business finance management application. Database user access privileges are determine...

Design/Logic Flaw

Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions. Sage XRT Treasury is a business finance management application. Database user access privileges are determine...

CVE-2017-3183 Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions

Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions. Sage XRT Treasury is a business finance management application. Database user access privileges are determine...

CVE-2017-3183

Sage XRT Treasury v3 is affected by CVE-2017-3183 through an authorization bypass where database access privileges are determined by the USER_CODE field. An authenticated, low-privilege user can alter USER_CODE to match a privileged user and gain full/privileged access to the SQL database, enabli...

EML Enterprise Address Book Management System v5.4.4 has SQL Injection Vulnerability

EML enterprise customer relationship management system is based on Linux open kernel and Apache based Php + Mysql intelligent B / S interactive service system. EML Enterprise Contacts Management System v5.4.4 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to...

SQL injection vulnerability in ne***.php page of website building system of Beijing Yitianxing Technology Co.

Ltd. is an Internet service provider specializing in providing customized website construction solutions for enterprises. A SQL injection vulnerability exists in the ne.php page of the website building system of Beijing Yitianxing Technology Co. An attacker can use the vulnerability to obtain...

Cisco Policy Suite Policy Builder Authentication Bypass Vulnerability

Cisco Policy Suite is a carrier-grade policy, charging, and subscriber data management solution. An authentication bypass vulnerability exists in the Policy Builder database of Cisco Policy Suite. The vulnerability stems from a lack of authentication. An attacker can exploit the vulnerability by...

CVE-2018-0374

Cisco Policy Suite prior to version 18.2.0 vulnerable to an unauthenticated remote attack via the Policy Builder database. The root cause is lack of authentication, enabling an attacker to connect directly to the Policy Builder database and access or modify data. Affected component: Policy Builde...

OURPHP website builder system has SQL injection vulnerability

OURPHP is a PHP+MySQL based development of W3C standard building system. OURPHPCMS V1.8.2, V1.8.3 version of the system are SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in SEMCMS_i***.php page of SemCms website builder system version 2.7

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run...