SQL Injection Vulnerability in Five Fingers CMS Backstage Model Management System

Five Fingers CMS is a professional content management system. Five Fingers CMS backend model management system has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database information...

Ovidentia SQL Injection Vulnerability (CNVD-2019-24209)

Ovidentia is an open source content management system and collaboration platform based on PHP and MySQL by the French CANTICO team, which can be used for publishing and managing projects, publication and article management, schedule sharing, and more. A SQL injection vulnerability exists in...

CVE-2019-1010259

SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.userchpass function from the MySQL module for Salt. The attack vector is: specially crafted...

SolarWinds Network Performance Monitor SQL Injection Vulnerability

SolarWinds Network Performance Monitor NPM is a network performance monitor from SolarWinds, Inc. that provides monitoring and reporting, tracking of up/down status, real-time analytics, and network performance statistics for routers, virtualized environments, and other devices. A SQL injection...

SQL injection vulnerability exists in it***.php of website building system of Shanghai To-Mei Information Technology Co.

Ltd. is a company dedicated to corporate or entrepreneurial image design and online business expansion services. There is a SQL injection vulnerability in it.php, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Electronic Supervision System of Gansu Chengxing Information Technology Co.

Gansu Chengxing Information Technology Co., Ltd. developed to meet the needs of various types of public resource transactions, can provide timely, reliable and effective support for the Chengxing public resource trading platform. Gansu Chengxing Information Technology Co., Ltd. electronic...

CVE-2019-12850

A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168...

CVE-2019-12850

A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168...

Design/Logic Flaw

A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168...

CVE-2019-12850

The CVE-2019-12850 entry concerns a query injection vulnerability in JetBrains YouTrack. According to multiple sources, including Red Hat and NVD, the issue allowed injection of queries and was fixed in YouTrack version 2018.4.49168. Affected product: YouTrack (JetBrains). Root cause details are ...

CVE-2019-12850

A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...

SQL injection vulnerability in co***.php page of Jinan Yuxia Information Technology Co.

Jinan Yuxia Information Technology Co., Ltd. to the Internet products and related services as the main direction, is a collection of website construction and network promotion, IDC business, software development, server hosting, telecommunications value-added services and other integrated service...

SQL Injection Vulnerability in waychar Race Entry System

Waychar Event Registration System is a PHP/MYSQL based sports event registration system. The Waychar Tournament Registration System suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

Dutch Auction Factory Component SQL Injection Vulnerability in Joomla!

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS. Dutch Auction Factory is used in one of the auction site to create extensions . A SQL injection vulnerability exists in the Dutch Auction Factory...

Joomla! AMGallery Component SQL Injection Vulnerability

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. AMGallery is used in which a picture display component . A SQL injection vulnerability exists in the AMGallery component of Joomla! An attacker can...

GHSA-4QHX-G9WP-G9M6 Failure to sanitize quotes which can lead to sql injection in squel

All versions of squel are vulnerable to sql injection. The squel package does not properly escape user provided input when provided using the setFields method. This could lead to sql injection if the query was then executed. Proof of concept demonstrating the injection of a single quote into a...

HPE Intelligent Management Center (IMC) SQL Injection Code Execution Vulnerability (CNVD-2019-24556)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A queryIpAllocateInfoBySubnetIp SQL injection code execution vulnerability exists in HPE Intelligent...

Hefei Tuono Network Technology Co., Ltd. building system SQL injection vulnerability

Hefei Topfield Network Technology Co., Ltd. is a company mainly engaged in website construction, website promotion, website design, website optimization, website marketing and other businesses. Hefei Topfield Network Technology Co., Ltd. website building system there is a SQL injection...

SQL injection vulnerability in pr***.php page of Jinan Yuxia Information Technology Co.

Jinan Yuxia Information Technology Co., Ltd. to the Internet products and related services as the main direction, is a collection of website construction and network promotion, IDC business, software development, server hosting, telecommunications value-added services and other integrated service...