6843 matches found
Joomla! com_enmasse Component SQL Injection Vulnerability
Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other functions . A SQL injection vulnerability exists in the term?tmpl page id parameter of the Joomla!comenmasse component, which can be exploited by an attacker to compromise the applicatio...
SQL Injection Vulnerability in the id parameter of Zhixiang OA System
Zhixiang Information consists of Guangzhou Zhixiang Computer Technology Co., Ltd. and Shenzhen Zhixiang Cloud Information Technology Co., Ltd. and has many offices around the world, which is a customer demand-oriented information technology company centered on the continuous innovation of IT...
Contrexx CMS egov Module 1.0.0 - SQL Injection
Exploit Title: Contrexx CMS:egov moudle SQL injection Google Dork: inurl:?section=egov Date: 12/9/2016 Exploit Author: hamidreza borghei Software Link: https://www.cloudrexx.com/de/index.php?section=downloads&cmd=7&category=8 Version: 1.0.0 Tested on: linux sql injection in id parameter:...
Generalized SQL Injection Vulnerability in VOD Live Streaming System of Nanjing Suaxing Information Technology Development Co.
Nanjing Suya Star Information Technology Development Co., Ltd. is for the school distance education and campus entertainment on demand needs and the development of a set of application systems. A generic SQL injection vulnerability exists in the VOD on-demand live streaming system of Nanjing Suya...
SQL Injection Vulnerability in School Management System of Shenzhen Chuangyou Network Co.
Shenzhen Chuangyou Networks school management system is a secondary school-based education management software. The product /sysTemplateWeb/ShowWebStyle.aspx?XXDM=440203000008&CatalogId= there is a SQL injection vulnerability, the injection parameter is CatalogId, the attacker can use the...
SQL Injection Vulnerability in the id parameter of the /www/index.php page of Xiyu Media's Digital Newspaper System
Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There is a SQL injection vulnerability in this product, the vulnerability URL is: /www/index.php?mod=admin&con=review&act=view&id=, the vulnerability parameter is: id, the attacker can use the vulnerability t...
SQL injection vulnerability in the id parameter of the page of the digital newspaper system /www/index.php?mod=admin&con=adminuser&act=mypwdpost
Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There are SQL injection vulnerabilities in this product, the vulnerability URL is: /www/index.php?mod=admin&con=adminuser&act=mypwdpost, the vulnerability parameter is: id, POST method of injection, the...
SQL Injection Vulnerability in Showarticles.asp Page ID Parameter of Chengdu Yilian Government Website Building System
Chengdu Yilian government website building system is a portal website for government courts and other users developed by . There is a SQL injection vulnerability in this product, the vulnerability URL is: /Showarticles.asp?ID=,cookie injection, the injection parameter is ID, the attacker can use...
SQL Injection Vulnerability in Showgg.asp Page ID Parameter of Chengdu Yilian Government Website System
Chengdu Yilian Government Website System is a portal website for government courts and other users developed by . There is a SQL injection vulnerability in this product, the vulnerability URL is:/Showgg.asp?ID=,cookie injection, the injection parameter is ID, the attacker can use the vulnerabilit...
SQL injection vulnerability in the ID parameter of the GG.aspx page of the Quality Supervision Station Comprehensive Information Service Platform of Zhuhai Xinhua Tong Software Co.
ZHXHT Supervision and Regulation Comprehensive Service Platform is a comprehensive platform integrating engineering supervision, testing supervision, commercial mixing supervision, web portal, commercial mixing quality networking supervision, credit rating, OA office, SMS system, wireless...
SQL Injection Vulnerability in the id Parameter of Nanchangwei.com Electronic Newspaper System
"VNN Digital Newspaper" is a professional software product for digitizing newspapers, which can provide a perfect solution for paper newspapers to go online. It allows the original newspaper layout to be quickly and easily presented to readers through the Internet. There exists a SQL injection...
SQL injection vulnerability in the info_id parameter of PlacardView.aspx page of OA system of Shanghai Shuang Yang Computer Hi-Tech Development Co.
Shanghai Shuang Yang Computer Hi-Tech Development Company Shuang Yang for short is a high-tech enterprise mainly engaged in application software development and system integration. The product /DSOATY/FromBaoShan/LaborSpecial/PlacardView.aspx?infoid=1 at the existence of SQL injection...
SQL Injection Vulnerability in the mail_ID Parameter in the mail.do of Fuzhou Tranda Special Equipment Safety Monitoring System
Fuzhou Chuangda special equipment safety monitoring system using B / S structure, the use of J2EE for development, the system can run on any operating system platform, running into the server and client operation, the server runs the corresponding WEB APPLICATION services such as: TOMCAT, JBOSS,...
SQL Injection Vulnerability in the id Parameter of Nanchangwei.com Electronic Newspaper System
Vnet Digital Newspaper" is a professional software product to digitize newspapers, which can provide a perfect solution for paper newspapers to go online. A SQL injection vulnerability exists in the id parameter of Nanchang WiNET Digital Newspaper System. An attacker can exploit the vulnerability...
Generalized SQL Injection Vulnerability in BlueLine Intelligent Collaboration Platform of Shenzhen Weida Software Co.
Shenzhen Lanling Software Co., Ltd. is the first enterprise in China to research knowledge management and promote the construction of knowledge-based platform to provide solutions for customers. A SQL injection vulnerability exists in the EIS of the BlueLine Intelligent Collaboration Platform...
WordPress plugin Google Maps 'id' parameter cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Google Maps 'id' parameter due to the...
Arbitrary File Download Vulnerability in ZTE ZXECS EBG2800
The ZXECS EBG2800 is a converged communications product that integrates data, voice, security, behavior management and rich value-added business applications into a single system, providing a variety of functions required by enterprises in a modular format. An arbitrary file download vulnerabilit...
Mediaone 'id' Parameter SQL Injection Vulnerability
MediaOne is a multi-window fusion controller of the famous American company dVision. The advantage of this multi-window fusion controller called picture splicer in China is that it integrates multi-window picture-in-picture function, image edge fusion and surface geometric correction function, an...
Huge-IT Slideshow Cross-Site Scripting Vulnerability
Huge-IT Slideshow is an extension developed by the Huge-IT team for use in Joomla! to attract visitors by improving the style and character of your website. Huge-IT Slideshow v1.0.4 in . /views/slideshow/tmpl/default.php file is vulnerable to cross-site scripting. The vulnerability can be exploit...
