8634 matches found
Joomla! SQL Injection Vulnerability (CNVD-2020-12711)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A SQL injection vulnerability exists in Joomla! versions prior to 3.9.14, which stems from a lack of validation of externally-entered SQL statements...
SQL Injection Vulnerability in Web Design System of Weili Taiwan Ltd.
Taiwan Weili Web Design Co., Ltd. is a customized web site based on customer needs, mainly promoting the suite of web design services, customers include food, electronics, computers, machinery and service industries, etc.. A SQL injection vulnerability exists in the website building system of Wei...
SonicWall SMA100 SQL Injection Vulnerability
The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A SQL injection vulnerability exists in SonicWall SMA100 9.0.0.3 and earlier versions, which stems from a lack of validation of externally entered SQL statements in database-based applications and can be exploited by an...
Empire cms add topic at the existence of SQL injection vulnerability
Empire CMS is a content management system CMS. A SQL injection vulnerability exists in Empire cms at Add Topic. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL Injection Bypass Vulnerability in Web Security Dog (Apache Edition)
Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition suffers from a SQL injection bypass vulnerability. Attackers use the vulnerability to bypa...
SQL Injection Vulnerability in PM2 Project Management System of Beijing Bangyong Technology Co.
BONYON is committed to project management research and development, integrating project management consulting, software development, project management training and education as one of the professional foreign-funded companies. The PM2 project management system of Beijing BangYong Technology Co.,...
TuziCMS 2.0.6 ph***.cl***.php suffers from SQL injection vulnerability
TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS 2.0.6 ph.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in Key Management System
Key Management Service KMS is a security management service that allows you to easily create and manage keys, protect the confidentiality, integrity and availability of keys, meet the key management needs of users for multi-application and multi-service, and comply with regulatory and compliance...
SQL injection vulnerability in oceancms backend ad***_pa***.php file
Ocean CMS is a video-on-demand system. Ocean cms background adpa.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
Intesync Solismed SQL Injection Vulnerability
Intesync Solismed is a clinic management system designed for use by independent and free clinics. Intesync Solismed suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to execute illegal SQL commands...
CloudLock win_3.1.18.12 public cloud version suffers from sql injection bypass vulnerability
CloudLock is a free server security management software based on operating system kernel hardening technology, which supports cross-platform real-time, batch and remote security management of windows/linux servers. CloudLock Win3.1.18.12 public cloud version suffers from a sql injection bypass...
ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2020-12713)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...
SQL Injection Vulnerability in Bibliographic Data Retrieval System of Beijing Jinpan Software Technology Co.
Beijing Jinpan Software Technology Co., Ltd. bibliographic data retrieval system is the use of computer terminals to query the library collection of data resources of a modern search method. There is a SQL injection vulnerability in the Bibliographic Data Retrieval System of Beijing Jinpan Softwa...
SQL Injection Vulnerability in the Report Query System of Health Management Center
Health Management Center report query system is free free open source , it is based on unix as a prototype transformation of a multi-user multi-tasking operating system . The Health Management Center Report Query System suffers from a SQL injection vulnerability that can be exploited by an attack...
PT-2019-15940 · Octeth · Octeth Oempro
Name of the Vulnerable Software and Affected Versions: Octeth Oempro versions 4.7 through 4.8 Description: The issue allows SQL injection. The parameter CampaignID in the Campaign.Get endpoint is vulnerable. Recommendations: For versions 4.7 and 4.8, avoid using the CampaignID parameter in the...
CVE-2019-19649
Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function...
74cms 4.2.26 SQL Injection Vulnerability in Frontend Aj***.php Page
Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms 4.2.26 SQL injection vulnerability exists in the frontend Aj.php page. An attacker can exploit the vulnerability to obtain sensitive information from the...
SQL Injection Vulnerability in Secret Key Management System
Founded in 1997, DEAN Information Technology Co., Ltd. is one of the early enterprises focusing on the theoretical research and technical application of commercial cryptography, and is one of the first batch of commercial cryptography research and production designated units and sales licensed...
SQL Injection Vulnerability in Jinhua Flying Fox Network System
Jinhua Flying Fox Network Technology Co., Ltd. for a set of domain name registration, web hosting, enterprise post office, website construction, network promotion as one of the comprehensive technology enterprises. Jinhua Flying Fox Network website builder system has a SQL injection vulnerability...
Web Security Dog (Apache Edition) V4.0 suffers from sql injection bypass vulnerability
Website Security Dog is a server tool that integrates website content security protection, website resource protection and website traffic protection functions. Functions covered by the net horse / Trojan scanning, anti-SQL injection, anti-stolen links, anti-CC attacks, real-time website traffic...