SQL Injection Vulnerability in LJCMS of Beijing Liang Jing Zhi Cheng Technology Co.

LiangJing Content Management System LJCMS , known for its many templates , easy to optimize , open source , is the newest PHP open source website management system . Beijing LiangJing Zhicheng Technology Co., Ltd LJCMS suffers from a SQL injection vulnerability, which can be exploited by attacker...

74cms Frontend SQL Injection Vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

TI-Tool TITool PrintMonitor SQL Injection Vulnerability

TI-Tool TITool PrintMonitor is a printer management solution from TI-Tool Austria. A SQL injection vulnerability exists in TI-Tool TITool PrintMonitor. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit th...

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-01295)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SQL Injection Vulnerability in VANOC Enterprise Website Management System cm***_in***_mo***.asp Page

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. VANOC enterprise website management system cminmo.asp page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

TitanHQ WebTitan SQL Injection Vulnerability

TitanHQ WebTitan is a web content filter from TitanHQ Ireland. A SQL injection vulnerability exists in some features of the administrative interface in versions of TitanHQ WebTitan prior to 5.18. An attacker could exploit this vulnerability to obtain sensitive information from the software's...

Forma Learning Management System SQL Injection Vulnerability (CNVD-2019-44281)

Forma Learning Management System LMS is a learning management system LMS. A SQL injection vulnerability exists in the Forma Learning Management System. An attacker can exploit the vulnerability with a specially crafted web request to disclose database user credentials and potentially access the...

SQL Injection Vulnerability in Heilongjiang Zihai Technology Group Co.

IISI Technology Group Co., Ltd. to provide a full set of Internet solutions for enterprises as the main direction is a set of domain name registration, IDC services, website construction and operation, APP development, software system development and other Internet services as one of the group...

Forma Learning Management System SQL Injection Vulnerability

Forma Learning Management System LMS is a learning management system LMS. A SQL injection vulnerability exists in the Forma Learning Management System. An attacker could exploit this vulnerability by sending a specially crafted web request to disclose database user credentials and access the...

NAPC Xinet Elegant 6 Asset Library Web Interface SQL Injection Vulnerability

The NAPC Xinet interface Elegant 6 Asset Library is a web-based interface to the XIET asset management solution. A SQL injection vulnerability exists in NAPC Xinet interface Elegant 6 Asset Library version 6.1.655. The vulnerability stems from a lack of validation of externally entered SQL...

SQL Injection Vulnerability in Ridewind Multi-User PHP Statistics System

Ride the Wind Multi-User PHP Statistics System is a website traffic statistics system for web store statistics. Ridewind Multi-User PHP Statistics System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Pinnacle Online Marking System

Pinke online marking system is the objective questions automatically identified, subjective questions by the teacher in front of the computer marking, and ultimately by the computer will be subjective and objective questions results summarized to generate the school's required statistical analysi...

SQL Injection Vulnerability in SeaChange Collaboration Office System

Wuhan Haichang Information Technology Co., Ltd. is a high-tech enterprise engaged in the research, development and sales of office automation software, collaboration management software and e-government software. An SQL injection vulnerability exists in the SeaChange Collaboration Office system,...

Centreon Web SQL Injection Vulnerability

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A SQL injection vulnerability exists in Centreon Web. The vulnerability stems from a lack of...

SQL Injection Vulnerability in NetMizer Log Management System

The NetMizer system records all session logs flowing through the device and transmits them to an external management center, which is an analysis system in conjunction with the NetMizer system. NetMizer log management system has a SQL injection vulnerability, through which an attacker can steal...

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-00511)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2019-44534)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A SQL injection vulnerability exists in IBM Sterling B2B...

SQL Injection Vulnerability in WebOA Network Office Automation Software

WebOA network office automation software is an office software that allows company employees to download and upload shared information through a browser. A SQL injection vulnerability exists in WebOA Network Office Automation Software. An attacker can exploit the vulnerability to obtain sensitive...

OpenTrade SQL Injection Vulnerability

OpenTrade is an open source cryptocurrency trading platform. A SQL injection vulnerability exists in versions of OpenTrade prior to 2019-11-23. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the...

rConfig SQL Injection Vulnerability (CNVD-2020-41583)

rConfig is an open source network device configuration management utility . A SQL injection vulnerability exists in rConfig version 3.9.2, which stems from a lack of validation of externally entered SQL statements in database-based applications, and can be exploited by an attacker to execute...