SQL Injection Vulnerability in ThinkLC V3.5 Classified Information System withdrawal.php Page

ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the ThinkLC V3.5 Classified Information System withdrawal.php page due to the program failing to adequately filter user-supplied input. An attacke...

SQL Injection Vulnerability in ThinkLC Classified Information System telfees.php Page

ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the telfees.php page of the ThinkLC Classified Information System. The vulnerability is caused due to the system failing to effectively filter...

MGASA-2017-0388 Updated kernel-tmb packages fix security vulnerabilities

This kernel-tmb update is based on upstream 4.4.92 and fixes at least the following security issues: A security flaw was discovered in nl80211setrekeydata function in the Linux kernel since v3.1-rc1 through v4.13. This function does not check whether the required attributes are present in a netli...

The vulnerability of the Preboot Policy service of the information system management software ZENworks Configuration Management allows a perpetrator to execute arbitrary code.

The vulnerability of the Preboot Policy service in the information system management software ZENworks Configuration Management ZCM is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

SQL Injection Vulnerability in Wisdom 2000 Design Institute Comprehensive Information Management System of Hangzhou Wisdom Electronic Technology Co.

Ltd. is a leading professional provider of design institute management information technology products, services and solutions. A SQL injection vulnerability exists in the background login of the Wisdom 2000 Design Institute Comprehensive Information Management System, allowing an attacker to...

Over-authorized Access and Weak Password Vulnerabilities in the Integrated Management System for Meteorological Information in Modern Agricultural Parks of Chongqing Lanyu Tianshen Science and Technology Co.

Modern Agricultural Park Weather Information Integrated Management System is a weather system for agriculture. Over-authorized access and weak password vulnerabilities exist in the Integrated Management System for Meteorological Information in Modern Agricultural Parks of Chongqing Lanyu Tianshen...

MS16-035: Description of the security update for the .NET Framework 4.5.2 in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: March 8, 2016

MS16-035: Description of the security update for the .NET Framework 4.5.2 in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: March 8, 2016 October 11, 2016 This security update has been re-released to Windows Server Update Services WSUS channel because of an offering issue that may have...

mysql: unspecified vulnerability in subcomponent: Server: GIS (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS...

UBUNTU-CVE-2016-5626

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS...

Oracle MySQL Server Component Remote Denial of Service Vulnerability (CNVD-2016-09885)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A remote denial of service vulnerability exists in the Server: GIS subcomponent of the MySQL Server component o...

SQL Injection Vulnerability in bjbh Parameter of Education Information Management System of Guangzhou Zhongda Dongri Education Technology Co.

Guangzhou Zhongda Dongri Education Technology Co., Ltd. education information management system is to provide an integrated campus information solution. A SQL injection vulnerability exists in the bjbh parameter of the Education Informationization Management System of Guangzhou Zhongda Dongri...

Opmantek NMIS Detection

Detection of Opmantek NMIS The script attempts to identify Opmantek NMIS and to extract the version number. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

The vulnerability of the ZENworks Configuration Management information system allows attackers to carry out “Xpath injection” attacks and gain read access to text files.

The vulnerability of the ChangePassword RPC method in the ZENworks Configuration Management information system management software is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to perform “Xpath injection” attacks and gain access to tex...

JCMS政府信息公开系统在/lm/front/noontimelist.jsp存在SQL注入漏洞

No description provided by source...

mysql: unspecified vulnerability related to Server:GIS (CPU July 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to GIS...

Unspecified Vulnerability in Oracle MySQL Server:I_S Component

Oracle MySQL Server is a relational and popular database. A security vulnerability exists in the Server:GIS subcomponent of Oracle MySQL Server, which can be exploited by remote attackers to construct a malicious WEB page and trick users into parsing it, which can impact system availability...

SQL Injection Vulnerability in Websiteid Parameter of Government Information System of Beijing Xiangyu Leading Software Co.

One-stop government information disclosure system is a management system that realizes the construction of open government columns based on website groups. There is a SQL injection vulnerability in the websiteid parameter of the one-stop government information disclosure system of Beijing Xiangyu...

某Gov行政中心系统Oracle注入漏洞(使用量大)

简要描述： 其涉及全国各省行政服务中心，案例不比大汉jcms少 详细说明： 看这里。。。 接上一弹 WooYun: 某大型政府服务系统Oracle注入使用量大 所有涉及单位为政府政务中心（其涉及全国各省行政服务中心，案例不比大汉jcms少）： 如： http://www.sinanxzfw.gov.cn/ 思南县行政服务中心 http://www.yjxzfw.com.cn/ 印江县行政服务中心 http://www.gygxzw.gov.cn:8066/ 贵阳国家高新区行政服务中心 http://www.tlsp.net/ 铁岭市公共行政服务中心 http://58.42.249.11...

Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 Comments.asp FC Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize...

Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 ClassList.asp Term Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize...