CVE-2019-9105

The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to make several types of API calls without authentication, as demonstrated by retrieving password hashes via an inc/utils/RESTAPI.php?command=CallAPI&customurl=alladminusers...

S-CMS enterprise website builder system sc***.php suffers from SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website builder system sc.php exists SQL injection vulnerability, attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in Se***.aspx Page of Qixing Conference Booking System

Qixing Meeting Booking System is a meeting booking system that prevents meeting conflicts and allows you to view the utilization rate of each meeting room in order to optimize the configuration of the meeting room. A SQL injection vulnerability exists in the Se.aspx page of the Qixing Meeting...

SQL Injection Vulnerability in Personal Information Modification on Tpshop Us***.php Page

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the personal information modification section of the Tpshop Us.php page. An attacker can exploit the vulnerability to obtain sensitive information from the...

SQL injection vulnerability in Tpshop v3.5 Us***.php page (CNVD-2019-17501)

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 Us.php page. Attackers can use the vulnerability to obtain sensitive information in the database...

ORM Injection Vulnerability in sqlalchemy

SQLAlchemy is a Python SQL toolkit and database object mapping framework. An ORM injection vulnerability exists in sqlalchemy, which can be exploited by an attacker to obtain sensitive database information...

SQL injection vulnerability in ab***.php page of Jinan Yuxia Information Technology Co.

Jinan Yuxia Information Technology Co., Ltd. to the Internet products and related services as the main direction, is a collection of website construction and network promotion, IDC business, software development, server hosting, telecommunications value-added services and other integrated service...

CVE-2018-20007

Yeelight Smart AI Speaker 3.3.100074 devices have improper access control over the UART interface, allowing physical attackers to obtain a root shell. The attacker can then exfiltrate the audio data, read cleartext Wi-Fi credentials in a log file, or access other sensitive device and user...

SQL Injection Vulnerability in Acme CMS Backend po***_ed***.php

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the background poed.php of Acme CMS, which can be exploited by attackers to obtain sensitive databas...

PHPOK Enterprise Building System v5.2.116 SQL Injection Vulnerability in Frontend

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. PHPOK Enterprise Station Building System v5.2.116 has a SQL injection vulnerability in the frontend. An attacker can exploit this vulnerability to obtain sensitive database information...

Chaozhou Weipai Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Weipai Technology is specializing in micro-platform planning and development, leveraging on the WeChat public platform and open platform, customized display, interaction, sharing, promotion and sales in one of the micro-platform. There is a SQL injection vulnerability in the website building syst...

Suzhou Jushang Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Suzhou Jushang Network Technology Co., Ltd. is a business enterprise e-commerce solutions, website construction, domain name registration, web hosting, enterprise post office, software development, system integration, Baidu search bidding ranking promotion and other services. Suzhou Jushang Netwo...

SQL Injection Vulnerability in Acme cms

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. Acme CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

PT-2019-16964 · Ibm · Ibm Tririga Application Platform

Name of the Vulnerable Software and Affected Versions: IBM TRIRIGA Application Platform versions 3.5.3 through 3.6.0 Description: The issue may disclose sensitive information that is only available to a local user, which could be used in further attacks against the system. Recommendations: For...

PT-2019-18195 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 11.6.1 through 11.6.3.4 F5 BIG-IP versions 11.5.2 through 11.5.8 Description: The issue allows sensitive configuration objects to be expose...

CVE-2019-4146

CVE-2019-4146 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.0.1 . The vulnerability is an information disclosure that could allow an authenticated user to obtain sensitive document information under unusual circumstances. The IBM security bulletin for this CVE (and CVE...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Build Forge (CVE-2018-1890;CVE-2019-2426;CVE-2018-3139;CVE-2018-3180;CVE-2018-12547)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Rational Build Forge. IBM Rational Build Forge has addressed the applicable CVEs. Vulnerability Details Rational Build Forge has addressed the following vulnerabilities: If you run your own Java co...

SQL Injection Vulnerability in dhcms Frontend

dhcms is an enterprise building system. A SQL injection vulnerability exists in the frontend of dhcms, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in VANOC Enterprise Website Management System

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. VANOC enterprise website management system has SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL injection vulnerability in the ch***.asp file of the enterprise website management system of Dynamic Science (CNVD-2019-13589)

Dynamic enterprise website management system is an asp + access for the development of enterprise website source code. There is a SQL injection vulnerability in the ch.asp file. An attacker can exploit the vulnerability to obtain sensitive information from the database...