Command Execution Vulnerability in HYBBS Frontend

HYBBS is a MVC-structured program based on HYPHP framework. A command execution vulnerability exists in the frontend of HYBBS, which can be exploited by attackers to gain control of the web server...

WMCMS V4.250.513 SQL Injection Vulnerability in Frontend pa***.php Page

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS V4.250.513 SQL injection vulnerability exists in the front pa.php page, which can be exploited by attackers to obtain sensitive database information...

Ctcms frontend cs***.php page has SQL injection vulnerability

Ctcms is a fast website building system that runs on PHP+MYSQL environment. A SQL injection vulnerability exists in the Ctcms frontend cs.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

WMCMS V4.250.513 SQL Injection Vulnerability in Frontend up***.php Page

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS V4.250.513 SQL injection vulnerability exists in the front-end up.php page, which can be exploited by attackers to obtain sensitive database information...

WMCMS V4.250.513 SQL Injection Vulnerability in Frontend ca***.php Page

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS V4.250.513 SQL injection vulnerability exists in the front ca.php page, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in the front-end mo***_pa***_mo***.asp file of the Environmental Protection Era Enterprise Online Bookkeeping Management System.

EcoTime Enterprise Online Bookkeeping Management System" is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and accounts payable, as well as company's bookkeeping and other related financial...

SQL injection vulnerability in the front-end mo***_mo***_zh***.asp file of the Eco Times Enterprise Online Bookkeeping Management System.

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

SQL injection vulnerability in the frontend mo***_sh***.asp file of the EcoTimes Enterprise Online Bookkeeping Management System

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

SQL injection vulnerability in the frontend p***_r***.asp file of the EcoTimes Enterprise Online Bookkeeping Management System

EcoTimes Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

SQL Injection Vulnerability in the Front-end us***.asp File of Environmental Times Enterprise Online Bookkeeping Management System

Eco Times Enterprise Online Bookkeeping Management System is a financial online bookkeeping software. SQL injection vulnerability exists in the us.asp file in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can use the vulnerability to obtain sensitive...

SQL injection vulnerability in the front-end zh***_mo***.asp file of the online bookkeeping management system of Environmental Times Enterprises (CNVD-2019-06672)

Eco Times Business Online Bookkeeping Management System is a financial online bookkeeping software. There is a SQL injection vulnerability in the zhmo.asp file in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain...

Discuz Frontend Override Login Vulnerability

Discuz is a general purpose community forum software system. There exists an override login vulnerability in the frontend of Discuz. The vulnerability is due to the administrator login background need account password, the vulnerability will not affect the background, the attacker may log in any...

SQL injection vulnerability in DBShop frontend Go***.php file

DBShop is an e-commerce system. A SQL injection vulnerability exists in the DBShop frontend Go.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in the front-end zh***_mo***.asp file of the online bookkeeping management system of Environmental Times Enterprises (CNVD-2019-06673)

Eco Times Enterprise Online Bookkeeping Management System is a financial online bookkeeping software. There is a SQL injection vulnerability in the zhmo.asp file in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in Us***_mo***.asp File of Online Bookkeeping Management System for Environmental Times Enterprises

Eco Times Enterprise Online Bookkeeping Management System is a financial online bookkeeping software. There is a SQL injection vulnerability in the usmo.asp file in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in the Frontend of Worklog 25.0 System by Kaixin Worklog

Worklog is a B/S based software for structuring intra-enterprise collaborative work. A SQL injection vulnerability exists in the frontend of the Qixing Worklog 25.0 system, which can be exploited by attackers to manipulate the database...

UsualToolCMS 8.0 Release frontend se***.php suffers from SQL Injection Vulnerability

UsualToolCMS UTCMS is a content management system and rapid site building framework. UsualToolCMS front-end se.php suffers from a sql injection vulnerability, which can be exploited by attackers to manipulate the database...

SQL Injection Vulnerability in the Frontend of Gallery 27.0, a Qixing Image & Video Library

Qixing Image & Video GalleryGallery is mainly used to store images or videos in the company. A SQL injection vulnerability exists in the frontend of Qixing Image & Video Library Gallery 27.0, which can be exploited by attackers to manipulate the database...

SQL injection vulnerability in Ectouch frontend Ex***.cl***.php file

ECTouch is a mobile mall online store system launched by Shanghai Shangchuang Network Technology Co. A SQL injection vulnerability exists in the Ex.cl.php file in the frontend of Ectouch. Attackers can use the vulnerability to obtain sensitive database information...

CVE-2019-3821

A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADOS gateway to exhaust file descriptors for ceph-radosgw service resulting in a remote denial of service...