3053 matches found
SQL Injection Vulnerability in phpweb finished website builder system
PHPWEB system is developed with PHP+MYSQL technology, with clear architecture and easy-to-maintain code. Support pseudo-static function, can generate google and baidu map, support keywords and descriptions, in line with SEO standards. phpweb finished website builder system has a SQL injection...
Travel Management System SQL Injection Vulnerability
Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that arises from a database application that lacks validation of externally entered SQL statements. An attacker could exploit this vulnerability to execute illegal SQL...
SQL Injection Vulnerability in Website Building System of Linyi Xinbao Network Technology Co. Ltd (CNVD-2020-51582)
Linyi Xinpao Network Technology Co., Ltd. is a company that provides website construction, software development and services, e-commerce, website operation, network marketing and promotion; network technology training consulting and information services; corporate image marketing planning,...
SQL Injection Vulnerability in Dongsheng Logistics System of Qingdao Dongsheng Weiye Software Co. Ltd (CNVD-2020-50754)
Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004 formerly known as Qingdao Jinghong Logistics Information Technology Co., Ltd., the company's main business scope for shipping logistics-related products and services. A SQL injection vulnerability exists in Qingdao Dongsheng...
SQL Injection Vulnerability in CMS Backend of Luoyang Yunye Information Technology Co.
Yunye CMS enterprise building system is a php open source cms specialized in small and medium-sized enterprise website construction. Luoyang Yunye Information Technology Co., Ltd. Yunye CMS background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive informatio...
GHSA-7HMH-8GWV-MFVQ SQL Injection in Kylin
Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries...
Ltd. cross-border e-commerce integrated platform has SQL injection vulnerability
Ltd. was founded in 2013 as an information technology service provider. Ltd. cross-border e-commerce integrated platform suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
Apache Kylin SQL Injection Vulnerability
Apache Kylin is the United States Apache Apache Software Foundation of an open source distributed analytical data warehouse . The product mainly provides Hadoop/Spark on top of the SQL query interface and multidimensional analysis OLAP and other functions. A SQL injection vulnerability exists in...
SQL Injection Vulnerability in ZZCMS Backend st***.php File
ZZCMS is a free website builder developed in asp language. A SQL injection vulnerability exists in the background st.php file of ZZCMS. Attackers can use the vulnerability to obtain sensitive information in the database...
PT-2020-4111
Name of the Vulnerable Software and Affected Versions: VeloCloud Orchestrator affected versions not specified Description: The issue is related to the VeloCloud Orchestrator component of the VMware SD-WAN by VeloCloud platform, which fails to properly protect the SQL query structure. This allows...
CVE-2020-14068
An issue was discovered in MK-AUTH 19.01. The web login functionality allows an attacker to bypass authentication and gain client privileges via SQL injection in central/executarlogin.php...
SQL Injection Vulnerability in Website Building System of Zibo Xu Ran Network Technology Co.
Zibo Xuran Web Technology Co., Ltd. is a high-end web design company that provides full branding services. There is a SQL injection vulnerability in the website system of Zibo Xuran Network Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in Dalian Longcai Technology Development Co.
Longcai Technology Group Limited Liability Company is a company dedicated to the development and construction of the Internet enterprise wisdom cloud service platform, and "Internet + industry innovation" platform services. There is a SQL injection vulnerability in the website building system of...
Shanghai Tsuenlu Software Development Studio Qixing Exam System Exam cookie parameter st*** exists SQL injection vulnerability
Exam System Exam is a compact exam system for internal corporate use for employee exams. Shanghai Tsuen Road Software Development Studio Qixing Exam System Exam candidate side cookie parameter st There is a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...
SQL Injection Vulnerability in the Frontend of waychar Enrollment System
Waychar Enrollment System is a PHP/MYSQL based enrollment system. A SQL injection vulnerability exists in the frontend of waychar enrollment system. An attacker can exploit this vulnerability to obtain sensitive information from the database...
SQL Injection Vulnerability in Shijiazhuang Zhenhong Network Technology Co.
Shop7z online shopping system is ASP online store platform software, providing comprehensive application services based on Internet solutions. Shijiazhuang City Zhenghong Network Technology Co., Ltd Shop7z online shopping system SQL injection vulnerability, an attacker can use the vulnerability t...
SQL Injection Vulnerability in XSLCMS ne***.php Page
New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS ne.php page. An attacker can exploit the vulnerability to obtain sensitive database information...
Harbin Qixun Technology Co., Ltd. construction system in ****.php page SQL injection vulnerability
Harbin Qixun Technology Co., Ltd. is an Internet enterprise specializing in small and medium-sized enterprise network marketing outsourcing. Harbin Qixun Technology Co., Ltd. construction system in .php page there is a SQL injection vulnerability. Attackers can use the vulnerability to obtain...
SQL Injection Vulnerability in Smart Government OA Collaboration Platform
Intelligent government OA collaborative office platform is a set of independent research and development of collaborative office software, is specifically tailored for the government office of the new office software system. There is a SQL injection vulnerability in Smart Government OA...