SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co. Ltd (CNVD-2020-68883)

Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection vulnerability in the website building system of Inner Mongolia Hohai Trading Co. Attackers can use the vulnerability ...

SQL Injection Vulnerability in Shield Spirit Voting Voter System for Front-end User Modification Data

Shield Spirit Voting Powder Sucking System can be applied to the public number, through the WeChat public number of the message interface to collect the user to send the vote number of the data to reach the vote, with anti-brush voting voting function, but also efficiently suck the live powder...

SQL Injection Vulnerability in the re***.php file of Anjoye Real Estate System

Anleye is a domestic real estate website construction brand, the program is made of highly efficient PHP5+MYSQL architecture. A SQL injection vulnerability exists in the re.php file of Anleye real estate system. An attacker can exploit the vulnerability to obtain sensitive information from the...

S-CMS e-commerce system backend has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. A SQL injection vulnerability exists in the backend of S-CMS e-commerce system. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Vulnerabilities fixed in Oracle Communications-producton

Oracle has fixed vulnerabilities in Communications Messaging Server. The vulnerabilities allow an unauthenticated malicious person with network access to the vulnerable system may be able to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS...

Vulnerabilities fixed in Oracle Financial Services Software

Oracle has fixed vulnerabilities in several Oracle Financial Services products. The vulnerabilities enable an unauthenticated malicious person with network access to a vulnerable system potentially able to launch attacks that result in the following categories of damage: Denial-of-Service DoS...

SQL Injection Vulnerability in BlueCMS

Bluecms is an asp+access for the development of enterprise website cms. Bluecms has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

UBUNTU-CVE-2020-14885

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

Vulnerabilities fixed in Nagios XI

Vulnerabilities have been fixed in Nagios XI. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS. Remote code execution User Rights SQL Injection Access to sensitive data Nagios...

Vulnerabilities fixed in Oracle E-Business Suite

Oracle has fixed vulnerabilities in the following Oracle E-Business Suite products: Applications Manager Marketing Application Object Library Trade Management Universal Work Queue Installed Base CRM Technical Foundation One-to-One Fulfillment Applications Framework E-Business Suite Secure...

OTRS Information Disclosure Vulnerability (CNVD-2020-63947)

OTRS ITSM is a suite of foundational solutions for IT service management organizations from the German OTRS Group. The solution is based on ITIL best practices and provides management tools for request and fault management, problem management, change management and release management. A security...

Vulnerabilities fixed in Blackberry Android

Blackberry has fixed multiple vulnerabilities in Blackberry Powered by Android. The vulnerabilities allow a malicious person, either remote or otherwise, to launch attacks that can lead to the following types of damage: Denial-of-Service DoS. Remote code execution User Rights Access to system dat...

Vulnerabilities fixed in IBM Security Access Manager

IBM has fixed multiple vulnerabilities in IBM Security Access Manager. The vulnerabilities potentially enable a malicious person to able to launch attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data Circumvention of...

Vulnerability fixed in Microsoft Exchange Server

Microsoft has fixed a vulnerability that could allow an authenticated malicious party potentially able to gain access to sensitive systems. Microsoft Exchange Server: |---------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...

SQL injection vulnerability in ne***.php page of website building system of Inner Mongolia Hohai Trading Co.

Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection vulnerability in the ne.php page of the website building system of Inner Mongolia Hohai Trading Co. An attacker can u...

Vulnerabilities fixed in Microsoft Windows

Microsoft fixes multiple vulnerabilities in Windows. A malicious party could potentially exploit the vulnerabilities to execute arbitrary code, to obtain elevated privileges, gain access to sensitive data, launch a denial-of-service attack, or to bypass a security measure. The vulnerability with...

SQL injection vulnerability in pr***.php page of Meizhou Haineng Technology Co.

Meizhou Haineng Technology Co., Ltd. was formerly known as "Zhengda network" studio, once supplies "Haineng network", April 24, 2017 officially changed its name to "Meizhou Haineng Technology Co. "Ltd. It is an innovative interactive integrated hosting marketing company that specializes in user...

Changchun North-South Technology Co., Ltd. website building system suffers from SQL injection vulnerability

Changchun North-South Technology Co., Ltd. is the first professional IT service operator in Jilin Province to provide a full range of Internet services for enterprises and institutions. Changchun North-South Technology Co., Ltd. station building system there are SQL injection vulnerabilities,...

Karel IP Phone IP1211 Web Management Panel Directory Traversal

Exploit Title: Karel IP Phone IP1211 Web Management Panel - Directory Traversal Exploit Author: Berat Gokberk ISLER Date: 2020-09-01 CVE: N/A Type: Webapps Vendor Homepage: https://www.karel.com.tr/urun-cozum/ip1211-ip-telefon Version: IP1211 Details Directory traversal vulnerability on the Karel...

Vulnerabilities fixed in Samsung Mobile

Samsung has fixed several vulnerabilities in its Android distribution. The vulnerabilities allow a malicious person whether remote or otherwise may be able to launch attacks that lead to the following categories of damage: Denial-of-server DoS. Remote code execution User rights Access to sensitiv...