CVE-2019-9134

Architectural Information System 1.0 and earlier versions have a Stack-based buffer overflow, allows remote attackers to execute arbitrary code...

SQL Injection Vulnerability in PCCW Information System

PCCW Information System is a website building system developed by PCCW Information Limited. A SQL injection vulnerability exists in PCCW's website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Zhirui Elementary and Middle School Students' School Registration Information Management System

Zhirui Elementary and Middle School Students' School Registration Information Management System is an information system that collects students' basic information and reports it to the education administration department. SQL injection vulnerability exists in Zhirui Primary and Secondary School...

SQL Injection Vulnerability in 162100 Classified Information System us***_ca***.php File

162100 Classified Information System is a classified information website source code developed by php+MySQL. 162100 Classifieds Information System usca.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in 162100 Classified Information System us***_lo***.php File

162100 Classified Information System is a classified information website source code developed by php+MySQL. 162100 Classifieds Information System uslo.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Care2x 2.7 (HIS) Hospital Information System SQL Injection

Exploit Title: Care2x 2.7 HIS Hospital Information system - Multiples SQL Injection Date: 01/17/2019 Software Links/Project: https://github.com/care2x/care2x | http://www.care2x.org/ Version: Care2x 2.7 Exploit Author: Carlos Avila Category: webapps Tested on: Windows 8.1 / Ubuntu Linux Contact:...

What is a vulnerability and what is not?

It looks like a pretty simple question. I used it to started my MIPT lecture. But actually the answer is not so obvious. There are lots of formal definitions of a vulnerability. For example in NIST Glossary there are 17 different definitions. The most popular one used in 13 documents is:...

Care2x 2.7 (HIS) Hospital Information System - Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Care2x 2.7 HIS Hospital Information system - Multiples SQL Injection Software Links/Project: https://github.com/care2x/care2x | http://www.care2x.org/ Version: Care2x 2.7 Exploit Author: Carlos Avila Category: webapps Tested on:...

Care2x 2.7 (HIS) Hospital Information System - Multiple SQL Injection

Care2x 2.7 HIS Hospital Information System - Multiple SQL Injection Exploit Title: Care2x 2.7 HIS Hospital Information system - Multiples SQL Injection Date: 01/17/2019 Software Links/Project: https://github.com/care2x/care2x | http://www.care2x.org/ Version: Care2x 2.7 Exploit Author: Carlos Avi...

Care2x 2.7 (HIS) Hospital Information System - Multiple SQL Injection

Exploit Title: Care2x 2.7 HIS Hospital Information system - Multiples SQL Injection Date: 01/17/2019 Software Links/Project: https://github.com/care2x/care2x | http://www.care2x.org/ Version: Care2x 2.7 Exploit Author: Carlos Avila Category: webapps Tested on: Windows 8.1 / Ubuntu Linux Contact:...

Code Execution Vulnerability in CIM City Information Aggregation System

CIM is a city information aggregation CMS that is easy to operate, powerful, data standardized, flexible in settings, and can easily realize various website types and style interfaces. A code execution vulnerability exists in CIM City Information Aggregation System, which can be exploited by...

SQL Injection Vulnerability in the Frontend of Rongguang Information Ordering and Consumption System (荣光信息订取餐消费系统前台存在SQL注入漏洞)

Rongguang Information Ordering and Picking Up Food Consumption System is a multi-functional ordering system developed by Shenzhen Rongguang Information Co. SQL injection vulnerability exists in the frontend of Rongguang Information Ordering and Consumption System, which can be exploited by...

File Upload Vulnerability in CSCMS

CSCMS is a multi-functional network information management system developed by Chongsheng Network Technology, which uses PHP5+MYSQL as the technical basis for development. Using OOP object-oriented approach to build the basic operating framework. CSCMS v4.1 RELEASE 20170605 version of the file...

The Role That IT Security Teams Need to Play in Connected Hospitals

The WannaCry outbreak that reportedly raked in US$1B in damage costs also forced doctors to cancel scheduled appointments, among other things, brought on warranted concern over pervasive ransomware attacks that could stem from oft-overlooked components of healthcare networks—exposed medical cyber...

Poor Security Exposes Medical Data to Cybercriminals

ARCHIVED STORY McAfee Researchers Find Poor Security Exposes Medical Data to Cybercriminals By Christiaan Beek · March 11, 2018 The nonperishable nature of medical data makes an irresistible target for cybercriminals. The art of hacking requires significant time and effort, encouraging experience...

PHIMS - Hospital Management Information System - Password SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PHIMS - Hospital Management Information System - 'Password' SQL Injection Exploit Author: Borna nematzadeh L0RD or email protected Vendor Homepage: https://codecanyon.net/item/phims/14974225?srank=1566 Version: All version...

PHIMS - Hospital Management Information System - Password SQL Injection

PHIMS - Hospital Management Information System - Password SQL Injection Exploit Title: PHIMS - Hospital Management Information System - 'Password' SQL Injection Dork: N/A Date: 2018-02-16 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage:...

CVE-2018-2381

SAP ERP Financials Information System SAPAPPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAPFIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2018-2381

SAP ERP Financials Information System SAPAPPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAPFIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

SQL Injection Vulnerability in ThinkLC V3.5 Classified Information System tops.php Page

ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the ThinkLC V3.5 Classified Information System tops.php page due to the program failing to adequately filter user-supplied input. An attacker can...