SQL Injection Vulnerability in Keyword Parameter of School Website Management System

The SchoolWise School Website Management System is a content management system for primary and secondary school websites. A SQL injection vulnerability exists in the Keyword parameter of the School Worry-Free School Website Management System. It allows attackers to exploit the vulnerability to...

WordPress HDW Player Plugin SQL Injection Vulnerability

HDW Player is an application plugin available on the official WordPress Store that provides streaming media playback services. The WordPress HDW Player plugin suffers from a SQL injection vulnerability, which is exploited by attackers to read sensitive information in the database...

Social Directory Script SQL Injection Vulnerability

Social Directory Script is a website that helps users to quickly build a social directory, where they can create a list of their favorite websites and add their favorite websites to the list. Social Directory Script 2.0 suffers from SQL injection in several parameters such as search and category...

Cell Phone Remote Lighting Monitoring System SQL Injection Vulnerability in txtUsername Parameter

Mobile Remote Lighting Monitoring System is a lighting monitoring system from China Electronic Technology Group Corporation. A SQL injection vulnerability exists in the Mobile Remote Lighting Monitoring System. The lack of filtering of the 'txtUsername' parameter allows an attacker to exploit the...

ZYCHCMS 'Fieldid' Parameter Has SQL Injection Vulnerability

ZYCHCMS is an enterprise website management system. ZYCHCMS v06 Build161216 suffers from a SQL injection vulnerability. The lack of filtering of the 'Fieldid' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...

PHPCMS 'index.php' page has SQL injection vulnerability

PHPCMS is a website management software. The software adopts modular development and supports a variety of classification methods, using it can easily realize the design, development and maintenance of personalized websites. PHPCMS 'index.php' page has a SQL injection vulnerability, which can be...

Joomla J-CruiseReservation Standard Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla J-CruiseReservation Standard component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Eventix Events Calendar Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla BookLibrary component. An attacker can exploit the vulnerability to access or modify database data...

Cybozu Garoon vulnerable to SQL injection

Overview Cybozu Garoon provided by Cybozu,Inc. is a groupware. Cybozu Garoon contains an SQL injection vulnerability. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under the Information Security Early...

Joomla com_maxcomment component SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla commaxcomment component. An attacker can exploit the vulnerability to access or modify database data...

SQL Injection Vulnerability in Ocean CMS v_name Parameter

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the adminajax.php page of Ocean CMS 6.46 utf-8 official version. The lack of filtering of the 'vname' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

Joomla Soccer Bet Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Soccer Bet component. An attacker can exploit the vulnerability to access or modify database data...

Joomla JE Directory Ads Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. The Joomla JE Directory Ads component SQL injection vulnerability can be exploited by attackers to access or modify database data...

Joomla JE Video Rat Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE Video Rat component. An attacker can exploit the vulnerability to access or modify database data...

SQL Injection Vulnerability in Ocean CMS zyapi.php Page

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the Ocean CMS zyapi.php page. The lack of filtering of the '$ids' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...

CVE-2016-8341

An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands...

NewsBee CMS SQL Injection Vulnerability

NewsBee CMS is a news website content management system. NewsBee CMS suffers from a SQL injection vulnerability. The vulnerability allows attackers to obtain sensitive information about the database...

SQL Injection Vulnerability in Graduate Student Management Information System of Nanjing Nansoft Technology Co.

Nanjing nansoft science and technology limited company postgraduate management information system using .net multilayer architecture development of b/s mode station building system. SQL injection vulnerability exists in the graduate student management information system of Nanjing Nansoft...

Web Client SQL Injection Vulnerability

VideoInsightWebClient is a Web-based client from VideoInsight, Inc. A SQL injection vulnerability exists in VideoInsight Web Client versions 6.3.5.11 and earlier. An attacker can exploit this vulnerability to execute remote code...

ALPINE-CVE-2016-6617

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions prior to 4.6.4 are affected...