The vulnerability of the designer/move.js file of the phpMyAdmin web application for database management system administration allows a perpetrator to execute arbitrary code.

The vulnerability of the designer/move.js file of the phpMyAdmin web application for database management systems relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further...

SQL Injection Vulnerability in Standard Pepsi Vi***.ashx Page of RunShen Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a high-tech company specializing in software development and information services. Ltd. SQL injection vulnerability exists in the Standard Pepsi Vi.ashx page, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Xiamen E-Shang Network Technology Co.

Xiamen Yi Shang Network Technology Co., Ltd. is an IT company dedicated to enterprise e-commerce consulting and solutions and enterprise informationization services. Xiamen Ease of Business Network Technology Co., Ltd. website building system there is a SQL injection vulnerability, an attacker ca...

CVE-2020-17373

SugarCRM before 10.1.0 Q3 2020 allows SQL Injection...

Xiamen SiXin Communication Technology Co., Ltd. warning platform with SQL injection vulnerability

Xiamen Sihsin Communication Technology Co., Ltd. is a national high-tech enterprise, Fujian Province Science and Technology Innovation Small Giant leading enterprise, Internet of Things IoT platform enterprise, IoT technology expert, IoT communication equipment and solution provider. Xiamen Sihon...

CVE-2020-16276

An SQL injection vulnerability in the Assets component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, authenticated attacker to gain unauthorized access to the database...

SQL Injection Vulnerability in Enterprise Standardized Management System of Runshen Information Technology (Shanghai) Co.

Runshen Information Technology Shanghai Co., Ltd. main standard automatic update management software, file digitization, digitization of the map. Ltd. enterprise standardization management system, there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Air Pollution Control Monitoring, Early Warning and Decision Support System of Huainan Runcheng Technology Co.

The framework of the air pollution prevention and control grid-based monitoring, early warning and decision support system consists of three parts: the perception layer, the platform layer and the application layer. In the sensing layer, monitoring points are laid out according to the actual dema...

SQL Injection Vulnerability in Website Building System of Shenzhen Shenzhou Tongda Network Technology Co.

Shenzhen Shenzhou Tongda Network Technology Co., Ltd, provides Tencent enterprise mailbox, high-end website construction PC website, cell phone website, WeChat public account, SEO optimization and promotion, enterprise WeChat and other network infrastructure services and network marketing and...

SQL Injection Vulnerability in Hanzhong Qiyuan Power Network Co.

Hanzhong Qiyuan Power Network Co., Ltd. is a high-tech Internet technology service provider. Hanzhong Qiyuan Power Network Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

CVE-2020-7356

CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinderseqid' in wayfindermeetinginput.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injectin...

SQL Injection Vulnerability in OA Office System of Chengdu Huigao Software Co.

Chengdu Huigao Software Co., Ltd. is an OA software developer and service provider. A SQL injection vulnerability exists in the OA office system of Chengdu Huigao Software Co. The vulnerability can be exploited by an attacker to obtain sensitive information from the database...

Extreme CMS has multiple vulnerabilities

Extreme CMS is an open source and free PHPCMS web content management system. Extreme CMS has XSS cross-site scripting , SQL injection , ultra-rights access vulnerabilities , attackers can exploit the vulnerability to obtain server privileges...

SQL Injection Vulnerability in ECSHOP v2.7.3 by Merchant Pie Software Ltd.

ECShop is a professional e-commerce mall system. A SQL injection vulnerability exists in ECSHOP v2.7.3 of Merchant Pie Software Limited, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in p***.php page of website building system of Inner Mongolia Wando Information Technology Co.

Wando Technology is an information technology company dedicated to enterprise informatization application services, in order to actively promote the development of enterprise informatization and e-commerce, because of the transparency, so the integrity of the enterprise policy. It is an applicati...

Anhui Hope Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Anhui Hope Network Technology Co., Ltd. is an Internet basic product service provider mainly engaged in website construction, network promotion and network marketing. Anhui Hope Network Technology Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerabili...

SQL injection vulnerability in va***.do page of Hefei Mingxin Software Technology Co.

Hefei Mingxin Software Technology Co., Ltd. was founded in 2013, is a professional information technology service provider, the use of cutting-edge science and technology, we focus on providing efficient, high-quality information technology solutions and information technology products and servic...

SQL injection vulnerability in Shanghai Zhihu Information Technology's website bu***_de*** system

Shanghai Zhihu Information Technology Co., Ltd. precipitated 5 years, each industry comprehensive business scenarios, combined with the ability of technological innovation, to provide social e-commerce, home furnishing industry, tourism and travel and other areas of the solution. Shanghai Zhihu...

SQL Injection Vulnerability in Digital Learning Resource Platform of Higher Education Publishing House

Digital Learning Resource Platform is a digital product of Higher Education Press, a practical, effective and scalable CMS system. SQL injection vulnerability exists in the Digital Learning Resource Platform of Higher Education Publishing House, which can be exploited by an attacker to obtain...