SQL Injection Vulnerability in the 'nrfl' Parameter of the APP Interface of Mobile Phone Letter (Mass Version)

Jiangsu Chuhuai Software Technology Development Co., Ltd. is a high-tech industry software company integrating software development, system integration and informationization construction. There is a SQL injection vulnerability in the Mobile Letter and Visit Mass Version APP, which can be exploit...

SQL Injection Vulnerability in Letter Call OA System (CNVD-2019-23864)

Xinhuo Co-operation Office System is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhao OA system, which can be exploited by attackers to obtain sensitive information from the database...

Apple Transparency Report Now Includes App Store Takedown Requests

For the first time Apple added to its transparency report the number of App Store takedown requests it has received from governments. The report, released Tuesday, also puts some hard numbers on how often law enforcement and governments request device and user data. App Takedown Request Apple’s...

Mueller Report Says No Collusion, Barr Raises a Million Questions

In a convoluted letter to Congress, Attorney General William Barr summarized Robert Mueller's report on the Russia investigation and said he won't charge President Trump with obstruction...

The vulnerability of the Cover Letter sub-component of the Oracle Content Manager component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Cover Letter sub-component of the Oracle Content Manager component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data using the HTTP protocol...

CVE-2019-2445

Vulnerability in the Oracle Content Manager component of Oracle E-Business Suite subcomponent: Cover Letter. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28454)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Content Manager is one of the...

CVE-2018-17397

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...

CVE-2018-17397

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...

CVE-2018-17376

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

Sql injection

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...

CVE-2018-17397

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...

Joomla! Component Jobs Factory 2.0.4 - SQL Injection

Joomla! Component Jobs Factory 2.0.4 - SQL Injection Exploit Title: Joomla! Component Jobs Factory 2.0.4 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link:...

LibreHealthIO LH-EHR Arbitrary File Write Vulnerability (CNVD-2019-21231)

LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. An arbitrary file write vulnerability exists in the letter.php file in the LibreHealthIO LH-EHR REL-2.0.0 release, which can be exploited to write a file with malicious content and...

LibreHealthIO LH-EHR Arbitrary File Write Vulnerability

LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. An arbitrary file write vulnerability exists in the letter.php file in the LibreHealthIO LH-EHR REL-2.0.0 release, which can be exploited to write a file with malicious content and...

CVE-2018-1000649

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php 2 vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User...

CVE-2018-1000649

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php 2 vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User...

CVE-2018-1000648

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled parameters...

CVE-2018-1000648

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled parameters...

Design/Logic Flaw

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php 2 vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User...