Chamilo LMS SQL Injection Vulnerability (CNVD-2018-26466)

Chamilo LMS is an open source online learning and collaboration system developed by the Chamilo Association. The system supports the creation of instructional content, distance training and online question and answer sessions. A SQL injection vulnerability exists in the...

CVE-2018-20338

Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...

SQL injection vulnerability in the front-end me***/fo***.php page of S-CMS hospital website builder system

S-CMS hospital station building system is developed by asp+access/mssql, easy to operate, convenient, support PC+mobile+WeChat. There is a SQL injection vulnerability in the front-end me/fo.php page of S-CMS Hospital Building System. Attackers can use the vulnerability to obtain sensitive...

SQL injection vulnerability in Laoban CMS V2.0 ca***.php page

Laoban CMS content management system referred to as: Laoban CMS is developed by Laoban based on PHP + MYSQL environment of the open source station-building system. A SQL injection vulnerability exists in the Laoban CMS V2.0ca.php page. An attacker can exploit this vulnerability to obtain sensitiv...

SQL Injection Vulnerability in Chihuahua Software F22 Apparel Management Software

Guangzhou Zhihua Software Technology Co., Ltd. is a high-tech enterprise specializing in providing information technology solutions for brand-name apparel, shoes and bags enterprises. A SQL injection vulnerability exists in Chihuahua Software F22 Apparel Management Software. An attacker can explo...

SQL injection vulnerability in ESPCMS P8 frontend Me***.php file

ESPCMS is an enterprise website management system built on LAMP development. A SQL injection vulnerability exists in the ESPCMS P8 frontend Me.php file. An attacker can use this vulnerability to obtain sensitive information from the database...

CVE-2018-19893

SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string...

anmi V1.1.0 SQL Injection Vulnerability in Foreground Us***.php File

Anmi program is a program that focuses on H5 mobile website/app construction. anmi V1.1.0 A SQL injection vulnerability exists in the front-end Us.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Frontend Vo*** Routing File of Dandelion Online Teaching System

Dandelion Online Teaching System is the website of Shenzhen Tomorrow See Technology Co., Ltd, which is an innovative science and technology enterprise focusing on the research and development of videoconferencing, video teaching and telemedicine system. Dandelion Online Teaching System has a SQL...

ThinkCMF SQL Injection Vulnerability (CNVD-2019-07960)

ThinkCMF is a Chinese content management framework based on PHP+MYSQL. An SQL injection vulnerability exists in the editpost function in NavController.class.php in ThinkCMF X2.2.2, which can be exploited by users with administrator privileges to perform SQL injection attacks via the parentid...

SQL injection vulnerability in frontend we*** routing file of Dandelion online teaching system

Dandelion Online Teaching System is the website of Shenzhen Tomorrow See Technology Co., Ltd, which is an innovative science and technology enterprise focusing on the research and development of videoconferencing, video teaching and telemedicine system. Dandelion Online Teaching System has a SQL...

SQL Injection Vulnerability in HuCart Backend aj***_ar***.php Page

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version of the background ajar.php page there is a SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain sensitive database information...

CVE-2018-13350

SQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL queries via the "Event" parameter...

ShopsN single merchant b2c mall system v2.3.6 suffers from SQL injection vulnerability (CNVD-2018-25890)

ShopsN single merchant b2c mall system is an open source online store system developed using PHP + MySQL. ShopsN single merchant b2c mall system v2.3.6 Or.class.php file of the cancelorder function there is a SQL injection vulnerability , an attacker can use the vulnerability to obtain the...

SQL Injection Vulnerability in GreenCMS

GreenCMS is a ThinkPHP-based content management system. GreenCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2018-19558

An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php...

CVE-2018-19551

Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php...

arcms SQL Injection Vulnerability

arcms is a content management system based on layui and arphp. A SQL injection vulnerability exists in the ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php files in arcms 2018-03-19 and earlier versions. A remote attacker can exploit this vulnerability by sending the 'limit'...

HuCart SQL Injection Vulnerability

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version of the system/class/helperclass.php file of the 'getip' function there is a SQL injection vulnerability , the vulnerability stems from the program fails to HTTP packet header data security filtering , remote attacker...

Library Management System SQL Injection Vulnerability

Library Management System is a library management system. A SQL injection vulnerability exists in Library Management System version 1.0. A remote attacker can use the 'Search for Books' page to view, add, modify, or delete information in the back-end database...