SQL Injection Vulnerability in Panmicro E-office /E-mobile/flow/flowtype_free.php Parameter

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flow/flowtypefree.php parameter, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in China Haida's WEB Management System

Guangzhou Zhonghaida Satellite Navigation Technology Co., Ltd. is the first listed company in the field of domestic mapping and geographic information equipment. A SQL injection vulnerability exists in China Haida's WEB management system. An attacker can utilize the vulnerability to obtain...

SQL Injection Vulnerability in Shenzhen Siliconware Sewise Live Server

SEWISE is a streaming media cloud computing company engaged in streaming media encoding, distribution and storage of audio and video. sewise live streaming server is a product of this company. A SQL injection vulnerability exists in SEWISE live server. An attacker can exploit the vulnerability to...

Amazon Linux: Security Advisory (ALAS-2015-485)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple SQL Injection Vulnerabilities in Cacti

Cacti is a set of open source network traffic monitoring and analysis tools. Cacti suffers from multiple SQL injection vulnerabilities. Due to the program's failure to properly filter user-supplied input before using it in a SQL query. Allowing an attacker to compromise the application, access or...

WordPress SQL Injection Vulnerability (CNVD-2015-05160)

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress has an unspecified SQL injection vulnerability that allows remote attackers to submit specially crafted SQL queries to manipulate or obtain database dat...

SO Planning SQL Injection Vulnerability

SO Planning is a free and open source set of online project production and management tools. SO Planning is vulnerable to a SQL injection vulnerability. The vulnerability is due to the program failing to adequately filter user-submitted input before constructing SQL query statements. An attacker...

SQL Injection Vulnerability in the ClassID Parameter of Guozidian's Asset Management Information System for Administrative Utilities

The Administrative Utility Asset Management Information System is an asset management information system, in order to standardize and strengthen the management of state-owned asset management information system of administrative institutions, and to improve the level of informationization of...

TCCMSV9.0 Latest Version SQL Injection Vulnerability

TCCMS is a content management system. TCCMSV9.0 has multiple SQL injection vulnerabilities in app/controller/news.class.php, which can be exploited by attackers to either obtain sensitive database information...

SQL Injection Vulnerability in Panmicro e-Weaver System

e-Weaver system is a Panmicro OA office software. A SQL injection vulnerability exists in the e-Weaver System/ServiceAction/com.eweaver.base.DataAction page of Panmicro, which can be exploited in a comprehensive manner to allow an attacker to obtain sensitive information about the database...

concrete5 'Access.php' SQL Injection Vulnerability

concrete5 is a free content management system CMS developed by Portland Labs in the United States. The system allows editing and layout directly on the page. A SQL injection vulnerability exists in concrete5 that stems from the program failing to adequately filter user-submitted input before...

Cacti SQL Injection Vulnerability (CNVD-2015-03938)

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti Group. The tool through snmpget to obtain data , using RRDtool drawing graphs to analyze , and provide data and user management features . A SQL injection vulnerability exists in versions prior to Cacti...

WordPress Plugin Simple Photo Gallery 'index.php' SQL Injection Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Simple Photo Gallery is an image gallery plugin. A SQL injection vulnerability exists in the WordPress plugin Simple Photo Gallery 'index.php. The...

SAP Sybase Adaptive Server Enterprise SQL Injection Vulnerability

SAP Sybase Adaptive Server Enterprise is a relational database management system. A SQL injection vulnerability in SAP Sybase Adaptive Server Enterprise allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

WordPress Contus Video Gallery Plugin SQL Injection Vulnerability

WordPress is a content management system developed using PHP language. Contus Video Gallery is a video gallery plugin for WordPress sites. A SQL injection vulnerability exists in Contus Video Gallery 2.7 and earlier versions due to the program failing to properly filter the content of the "vid" G...

Drupal WikiWiki Module SQL Injection Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A SQL injection vulnerability exists in the Drupal WikiWiki module. It allows remote attackers to execute arbitrary SQL commands...

postgresql: loss of frontend/backend protocol synchronization after an error

A flaw was found in the way PostgreSQL handled certain errors that were generated during protocol synchronization. An authenticated database user could use this flaw to inject queries into an existing connection...

SQL Injection Vulnerability in Mobile OPAC Library Portal System of Huifen Software

Ltd.'s Mobile Library Portal System is a mobile service solution integrating Pocket Portal and Pocket APP, which brings readers and libraries closer together in the era of mobile intelligence. SQL injection vulnerability in Huiwen Software Mobile OPAC Library Portal System. Allows an attacker to...

postgresql: loss of frontend/backend protocol synchronization after an error

A flaw was found in the way PostgreSQL handled certain errors that were generated during protocol synchronization. An authenticated database user could use this flaw to inject queries into an existing connection...

Joomla Random Article SQL Injection

Exploit Title : Joomla Random Article Component SQL Injection vulnerability Author : Jagriti Sahu AKA Incredible Vendor Link : http://demo.web-dorado.com Date : 23/03/2015 Discovered at : IndiShell Lab Love to : error1046 ^^ ,Team IndiShell,Codebreaker ICA ,Subhi,Mrudu,Hary,Kavi ^^...