SQL Injection Vulnerabilities in the Websites of Several Subsidiaries of Shenzhen Luxon Inspection Co.

Shenzhen Lixin Testing Co., Ltd. was established on April 21, 2004. The company's business scope includes: testing and analysis of consumer goods and industrial products; testing and analysis of electromagnetic compatibility and safety of electrical and electronic products and electric toys;...

SQL Injection Vulnerability in bymall Multi-User Mall System

Bymall multi-user mall system is the Bay Cloud development of self-employment + Merchants stationed B2B2C system, but also includes WeChat e-commerce system, spike chopping distribution, marketing full coverage, small program mall system, open the new era of small program live selling goods,...

SQL Injection Vulnerability in Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70831)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in Bo Yun CD-ROM System of Hangzhou Maida Electronics Co.

Hangzhou Maida Electronics Co., Ltd. provides professional library systems, including search, storage, access and other functions, customers involved in the domestic major universities and provincial and municipal libraries. A SQL injection vulnerability exists in Bo Yun CD-ROM system of Hangzhou...

SQL injection vulnerability in yycms yy***_us***.php file

yycms is a movie and television system. The yycms yyus.php file suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

TYPO3 安全漏洞

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in the TYPO3 viewstatistics extension prior to version 2.0.1, which originates from saving all GET and POST data requested by the TYPO3 front-end to a...

Butler ordering is prone to SQL injection vulnerability

Butler's Order Easy, a collection of PC Mall + WeChat Mall + WeChat Small Program + APP Mall + h5 Mall four-in-one online ordering mall system, seamlessly connecting to Butler's software, to achieve seamless connection of commodities, inventory, orders, customers, finance and other data. Butler's...

SQL Injection Vulnerability in Situ CMS (CNVD-2020-68888)

Situ CMS is the short name of Situ Tourism Website Management System, which is a self-developed website management system applicable to the construction of tourism websites. A SQL injection vulnerability exists in SITO CMS. An attacker can exploit the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in OurPHP Co***.php File

OurPHP is a PHP+MySQL based development of W3C-compliant website building system. OurPHP Co.php file contains SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in Shield Spirit Commodity Promotion System front-end ad***_de***.php page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

Victor CMS suffers from SQL injection vulnerability (CNVD-2020-66833)

Victor CMS is a simple content management system. Victor CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

ZZCMS suffers from SQL injection vulnerability (CNVD-2020-66606)

ZZCMS is a content management system for Webmaster Merchants. ZZCMS 2020 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Qixing Fault Reporting System (WeChat Public Version) 40.0

Servicedesk can be used as an enterprise fault reporting platform. The system supports secondary authentication, problem statistics, WeChat notification and other functions. A SQL injection vulnerability exists in Qixing Fault Reporting System WeChat Public Version 40.0, which can be exploited by...

SQL Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64774)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. A SQL injection vulnerability exists in NC Cloud of UFIDA Network...

SQL injection vulnerability in the do***_ca***.cl***.php file in the background of the MTCEO repository system

MTCEO library system using php + mysql, built by thinkphp underlying , Baidu library template style for the basic style . MTCEO library system background doca.cl.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Shield Spirit Voting Sucker System (CNVD-2020-62834)

Shield Spirit Voting Powder Sucking System can be applied to the public number, through the WeChat public number of the message interface to collect the user to send the vote number of the data to reach the vote, with anti-brush voting voting function, but also efficiently suck the live powder...

SQL Injection Vulnerability in Shield Spirit Voting Sucker System (CNVD-2020-62836)

Shield Spirit Voting Powder Sucking System can be applied to the public number, through the WeChat public number of the message interface to collect the user to send the vote number of the data to reach the vote, with anti-brush voting voting function, but also efficiently suck the live powder...

SQL Injection Vulnerability in JeewxBoot WeChat Manager Platform

JeewxBoot WeChat Butler Platform is a free JAVA WeChat Butler Platform that supports WeChat public number, small program, WeChat third-party platforms, sweepstakes and so on. JeewxBoot WeChat Butler Platform suffers from a SQL injection vulnerability that can be exploited by attackers to obtain...

SQL Injection Vulnerability in BlueCMS v1.6

bluecms is a free professional local portal system developed by open source combination PHP + MYSQL, focusing on local portal CMS. BlueCMS v1.6 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Bluecms suffers from SQL injection vulnerability (CNVD-2020-62376)

bluecms enterprise website is an asp+access for the development of enterprise website cms. Bluecms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...