SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38041)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Beijing Chave Network Technology Co., Ltd. qwadmin suffers from SQL injection vulnerability.

qwadmin is a backend management system based on thinkphp with aceadmin template. Beijing Chave Network Technology Co. qwadmin has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in YouDianCMS 9.2.6

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS 9.2.6 has a SQL injection vulnerability, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in DHCMS

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in DHCMS (CNVD-2021-37332)

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in the Reading Platform of Beijing Hongwen Hengrui Culture Communication Co.

Beijing Hongwen Hengrui Culture Communication Co., Ltd. is engaged in digital resource processing, sales of digital resource product manufacturers. A SQL injection vulnerability exists in the Xingzhi Reading Platform of Beijing Hongwen Hengrui Cultural Communication Co., Ltd, which allows an...

SQL Injection Vulnerability in interlib Library Cluster Management System

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. The...

SQL Injection Vulnerability in MCMS (CNVD-2021-37317)

MCms is a complete open source content management system. MCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-35559)

Extreme CMS is an open source and free CMS web content management system in PHP language. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

b2evolution Command Injection Vulnerability

b2evolution is a community content management system based on PHP and MySQL. A command injection vulnerability exists in b2evolution v7.2.2-stable, which can be exploited by a remote attacker to obtain sensitive database information by injecting SQL commands into the "cf name" parameter when...

OURPHP suffers from SQL injection vulnerability (CNVD-2021-34781)

OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

OURPHP suffers from SQL injection vulnerability (CNVD-2021-34776)

OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Cross-border E-commerce Order System of Hualei Information Technology Co.

Founded in 2013, Hualei Information Technology Co., Ltd. is a professional information technology service provider. A SQL injection vulnerability exists in the cross-border e-commerce order system of Hualei Information Technology Co. An attacker can exploit the vulnerability to obtain sensitive...

b2evolution 7-2-2 SQL Injection

Exploit Title: b2evolution 7-2-2 obtaining sensitive database information by injecting SQL commands into the "cfname" parameter Author: @nu11secur1ty Testing and Debugging: @nu11secur1ty Date: 05.06.2021 Vendor: https://b2evolution.net/ Link: https://b2evolution.net/downloads/7-2-2 CVE:...

b2evolution 7-2-2 - (cf_name) SQL Injection Exploit

Exploit Title: b2evolution 7-2-2 - 'cfname' SQL Injection Author: @nu11secur1ty Vendor: https://b2evolution.net/ Link: https://b2evolution.net/downloads/7-2-2 CVE: CVE-2021-28242 Proof: https://streamable.com/x51kso + Exploit Source: !/usr/bin/python3 Author: @nu11secur1ty CVE-2021-28242 from...

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-35527)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34285)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in NGFW of Next Generation Firewall of Beijing Netcom Technology Co.

Ltd. is a leading provider of network application management equipment in China, focusing on the research and analysis of the most cutting-edge trends in the field of network application management, providing users with advanced network application management technology, products and solutions,...

Cynthia has a SQL injection vulnerability

Cynthia is an issue management / bug management / task management / project management system. Cynthia suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in rpcms Backend

rpcms a lightweight php content management system , can be a blog system , enterprise website system , information system . It is small , lightweight , but feature-rich , scalable . rpcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database...