SQL injection vulnerability in the cid parameter of list.php page of JiuJiu website builder system

Daqing JiuJiu Network Technology Co., Ltd. is a technical service enterprise diversified in the field of full network marketing, enterprise e-commerce, network information technology services. There is a SQL injection vulnerability in the cid parameter of the list.php page of the JiuJiu network...

SQL injection vulnerability in news-details.php page of Interactive Creation website builder system

Interactive Creative Xiamen Digital Technology Co., Ltd. is a brand website construction company in Fujian Province, "Interactive Creative" is one of its independent brands. A SQL injection vulnerability exists in the news-details.php page of the Interactive Creative website builder system. An...

CVE-2017-1374

Sensitive data can be exposed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 that can lead to an attacker gaining unauthorized access to the system. IBM X-Force ID: 126867...

Code injection

Sensitive data can be exposed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 that can lead to an attacker gaining unauthorized access to the system. IBM X-Force ID: 126867...

PT-2017-13060

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 through 3.5 Description Sensitive data can be exposed, potentially allowing an attacker to gain unauthorized access to the system. Recommendations For versions 3.3 through 3.5, update to a version...

Niushop open source mall system Auth.php has sql injection vulnerabilities

NiuShop open source mall system , is by the Shanxi Niu Cool Information Technology Co., Ltd. completely independent design , research and development of a PHP open source e-commerce system . Niushop open source mall system Auth.php file parameters exist in the SQL injection vulnerability...

wstmall open source mall system endDate parameter SQL injection vulnerability

WSTMall is a multi-commercial O2O open source system developed by Merchant Software based on thinkphp, is a system that can help companies and individuals to quickly build a community service system. wstmall open source mall system endDate parameter SQL injection vulnerability , due to the system...

SQL Injection Vulnerability in yiifcms Content Management System

yiifcms is a content management system CMS developed on the yii framework. A SQL injection vulnerability exists in the yiifcms content management system due to the system's failure to strictly filter the id and catalogid parameters. An attacker can exploit this vulnerability to obtain sensitive...

IBM Maximo Asset Management Local Information Disclosure Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A local...

Niushop open source mall system goodshistory parameter SQL injection vulnerabilities exist

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . Niushop open source mall system goodshistory parameters exist SQL injection vulnerability . As the system...

UBUNTU-CVE-2017-5528

Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting XSS and cross-site request forgery CSRF attacks. The impact of this vulnerability includes the theoretical disclosure of sensitive information. Affects TIBCO...

Elasticsearch Logstash Information Disclosure Vulnerability (CNVD-2017-14152)

Elasticsearch Logstash is a set of log analysis and monitoring tools from Elasticsearch Netherlands. The tool provides functions such as search, processing and management of logs or events. An information disclosure vulnerability exists in Elasticsearch Logstash versions prior to 2.3.4. An attack...

CVE-2017-1131

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands. IBM X-Force ID: 121375...

FinecmsV5.0.8 has an arbitrary file read vulnerability

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. An arbitrary file read vulnerability exists in FinecmsV5.0.8. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Xiangsoft Smart Campus Platform

Xiangsoft Smart Campus Platform is an informative and intelligent software system. SQL injection vulnerability exists in Xiangsoft Technology Smart Campus Platform. An attacker can use this vulnerability to obtain sensitive information of the database...

MediaWiki Multiple Vulnerabilities (Apr 2017) - Linux

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; if...

eCom Cart SQL Injection Vulnerability

A SQL injection vulnerability exists in eCom Cart. The vulnerability allows attackers to obtain sensitive information about the database...

CVE-2017-9731

In meta/classes/packageipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package...

CVE-2017-9588

The "Oritani Mobile Banking" by Oritani Bank app 3.0.0 -- aka oritani-mobile-banking/id778851066 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

SQL Injection Vulnerability in a Graduation Integrated Practice Management Platform

Hangzhou Wenzhao Technology Co., Ltd. has developed a comprehensive practice management platform for graduation, which greatly improves the efficiency of colleges and universities and realizes the networked and paperless office of colleges and universities. There is a SQL injection vulnerability ...