SQL Injection Vulnerability in the Management Platform of Internet Service Establishments of the Public Security Bureau

Harbin Zhonglong Baiying Technology Development Co., Ltd. was established on May 29, 2013, mainly engaged in computer hardware and software, office automation equipment, security equipment and so on. A SQL injection vulnerability exists in the management platform of the Public Security Bureau's...

SQL Injection Vulnerability in the Management Platform of Internet Service Establishments of the Public Security Bureau (CNVD-2020-60076)

Harbin Zhonglong Baiying Technology Development Co., Ltd. was established on May 29, 2013, mainly engaged in computer hardware and software, office automation equipment, security equipment and so on. A SQL injection vulnerability exists in the management platform of the Public Security Bureau's...

Doors and windows to join the network there are SQL injection vulnerabilities

Doors and windows to join the network is a with their own strong product development capabilities, to build a complete information, user-active accurate traffic platform, to the majority of small and medium-sized businesses and entrepreneurs to build an effective docking environment. Doors and...

SQL Injection Vulnerability in Qimage's Website Management System (Wim)

Hefei Qimai Network Technology Co., Ltd. specializes in website construction, website optimization, web hosting, domain name registration and other network services. A SQL injection vulnerability exists in Qimage's website management system Wim. Attackers can utilize this vulnerability to obtain...

SQL Injection Vulnerability in Liangshi Online School System of Wuhan Liangshi Online Education Technology Co.

Wuhan Liangshi Online Education Technology Co., Ltd. is headquartered in Wuhan City, which is the thoroughfare of nine provinces, and is a high-tech enterprise restructured and established by the Education and Information Technology Center of Optics Valley Computer School. There is a SQL injectio...

SQL Injection Vulnerability in Zhirui Teacher Records Management System

Zhi Rui Teachers File Management System is a free institution management system developed by Zhi Rui software team using asp+access. Zhirui Teacher File Management System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Anhui Huanmei Intelligent Technology Co., Ltd. pollution source online monitoring system has SQL injection vulnerability

Anhui Huanmei Intelligent Technology Co., Ltd. was founded in May 2007, and its business scope includes computer hardware and software, network products, communication products, communication products and so on. Anhui Huanmei Intelligent Technology Co., Ltd. has a SQL injection vulnerability in i...

SQL Injection Vulnerability in Lean Value Stream Management System (LVS) at Hangzhou Gila Technology Co.

Hangzhou Gila Technology Co., Ltd. is an enterprise network service provider, is committed to providing customized solutions based on the needs of the enterprise network, to create a cloud service cloud network platform. A SQL injection vulnerability exists in the Lean Value Stream Management...

PT-2020-6996 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 6.3-milestone-2 through 13.10.4 XWiki Platform versions 11.10.6 through 14.3-rc-1 are not needed as they are included in the range above, so the final version is: XWiki Platform versions 6.3-milestone-2 through 13.10.4...

SQL Injection Vulnerability in Alencms

Dongguan Lightspeed Network is a large network company, specializing in providing website design services for the majority of small and medium-sized enterprises, government agencies, etc.. Alencms has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database...

DEBIAN-CVE-2020-26935

An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query...

Shield Spirit Original Article Submission System 1.0 SQL Injection Vulnerability in Frontend

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 suffers from a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain sensitive information from the database...

PT-2020-4300 · Teclib +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.2 Description: The issue is related to the incorrect neutralization of special elements used in SQL commands, which can allow a remote attacker to execute arbitrary SQL queries to the database in the target system b...

CVE-2020-15927

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module...

SQL Injection Vulnerability in PHP Version of Nettie CMS

OTCMS Nettie CMS is an article-based web content management system CMS. A SQL injection vulnerability exists in the PHP version of OTCMS, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-20800

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI...

SQL Injection Vulnerability in Linkworks of Quanta Technology Co.

Founded in 1998, Quanta Technology Co., Ltd. is a digital construction platform service provider with professional applications in the field of construction engineering as the core basic support, and value-added services such as industrial big data and industrial new finance. A SQL injection...

Observium SQL Injection Vulnerability (CNVD-2020-54786)

Observium is a low-maintenance auto-discovery network monitoring platform that supports multiple device types, platforms and operating systems. Observium suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to inject malicious SQL queries via the ajax/actions.php...

SQL Injection Vulnerability in Guojiz International Website Navigation System

Guojiz International Website Navigation System is developed by ThinkPHP5.0+PHP7.0+Mysql+Apache/Nginx/iis, which is suitable for small and medium-sized webmasters to build a CMS program. Guojiz International Website Navigation System has a SQL injection vulnerability, which can be exploited by...

VulnCheck KEV: CVE-2023-25157

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols...