SQL Injection Vulnerability in Ke361 Backend Mo***.cl***.php

Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modular, driven and...

Information leakage vulnerability in H5S CONSOLE of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology Shanghai Co. was founded on 09/25/2018. Legal representative Xue Shuimu, the company's business scope includes: engaged in computer technology, network technology, electromechanical technology, electronic technology, information technology, digital technology, communication...

SQL Injection Vulnerability in Ke361 (CNVD-2021-24525)

Ke361 is an open source Taobao system. Ke361 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive database data...

S-CMS News Portal System Backend SQL Injection Vulnerability

S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. There is a SQL injection vulnerability in the background of S-CMS News Portal System. Attackers can use the vulnerability to obtain sensitive informati...

SQL Injection Vulnerability in Joomla DigiCom Component ge*** Functions

Joomla is a globally recognized content management system, with 6% of the world's website market share. Joomla! is a software system developed using the PHP language with a MySQL database.DigiCom is a third-party component of Joomla. Joomla DigiCom component ge function SQL injection vulnerabilit...

SQL Injection Vulnerability in Enterprise Torch China's Website Building System (CNVD-2021-22995)

Founded in 2005, Enterprise Torch China is an early technology innovation company providing Internet application services for enterprise informationization construction. A SQL injection vulnerability exists in Enterprise Torch China's website builder system, which can be exploited by attackers to...

Logic flaw vulnerability in the backend of the Ruyi Management System

Ruoyi management system is based on SpringBoot2.0 permissions management system, the core technology using SpringBoot, MyBatis, Shiro, Thymeleaf, Bootstrap, Vue and so on. If the backend of the management system has a logic flaw vulnerability. Attackers can use the vulnerability to overstep the...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22937)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

PT-2021-2251 · Cisco · Cisco Network Services Orchestrator

Name of the Vulnerable Software and Affected Versions: Cisco Network Services Orchestrator NSO affected versions not specified Description: A vulnerability in the API subsystem and web-management interface of Cisco Network Services Orchestrator NSO could allow an unauthenticated, remote attacker ...

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive data As usual, Google...

UFIDA U8-OA l***.jsp suffers from SQL injection vulnerability.

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA l.jsp, which can be exploited by an attacker to obtain sensitive information from the database...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16407)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

Vulnerabilities fixed in the Ubuntu kernel

Vulnerabilities have been fixed in the Ubuntu kernel. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Remote code execution User rights...

PostgreSQL Information Disclosure Vulnerability (CNVD-2021-14796)

PostgreSQL is a free object-relational database server database management system distributed under a flexible BSD-style license. An information disclosure vulnerability exists in PostgreSQL. An attacker could exploit the vulnerability could bypass access restrictions to data via privileges to...

SQL Injection Vulnerability in the Website Building System of Inner Mongolia Kaiqi Technology Co.

Nei Meng Kai Enterprise Technology Co., Ltd. is committed to serving local head brand customers as well as medium and small enterprises, providing professional one-stop Internet marketing solutions for enterprises. There is a SQL injection vulnerability in the website building system of Inner...

Google Chrome Security Updates (stable-channel-update-for-desktop_12-2021-03) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop_12-2021-03) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

SQL Injection Vulnerability in Ca***.aspx Page of KTO's Fully Intelligent Parking Video Charging System

Xiamen KTO Communication Technology Co., Ltd. is a static transportation system solution provider. A SQL injection vulnerability exists in the Ca.aspx page of KTO's Fully Intelligent Parking Video Toll Collection System, which can be exploited by attackers to obtain sensitive information from the...

Cisco Identity Services Engine Information Disclosure Vulnerability (CNVD-2021-24476)

Cisco Identity Services Engine ISE is a next-generation identity and access control policy platform that enables organizations to enforce compliance, enhance infrastructure security, and streamline their service operations. An information disclosure vulnerability exists in the Cisco Identity...

SQL Injection Vulnerability in the Website Building System of Foshan City Sohu Network Technology Co.

Foshan City, Sohu Network Technology Co., Ltd. is a commitment to provide a full range of web site construction services for the enterprise Internet company. Foshan City, Sohu Network Technology Co., Ltd. building system there is a SQL injection vulnerability, attackers can use the vulnerability ...