SQL Injection Vulnerability in elib, the Book Lending Management System of Qixing Company (CNVD-2020-72444)

Qixing book lending system is a book lending management system, including the front and back office management system, the system uses ASP.NET language development. There is a SQL injection vulnerability in elib, which can be exploited by attackers to obtain sensitive information from the databas...

Schneider Electric Easergy T300

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely Vendor: Schneider Electric Equipment: Easergy T300 Vulnerability : Missing Authentication for Critical Function, Missing Authorization, Missing Encryption of Sensitive Data, Improper Restriction of Rendered UI Layers or Frames 2...

U.S. Dept Of Defense: Sensitive data exposure via https://███/secure/QueryComponent!Default.jspa - CVE-2020-14179

Summary: Information Disclosure vulnerability in outdated Jira. Description: Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the...

Jinan Yuxia Information Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2020-71676)

Jinan Yuxia Information Technology Co., Ltd. in the Internet industry have website construction, WeChat public number development, small program development, APP development, software development. Jinan Yuxia Information Technology Co., Ltd. website building system there is a SQL injection...

SQL Injection Vulnerability in Enping Wanshang Web Design Studio's Website Building System

Enping Wanshang Web Design Studio was founded in September 2016, and its business scope includes web design and website construction. There is a SQL injection vulnerability in the website building system of Wanshang Web Design Studio in Enping City, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in the background of Wild Rain Novel CMS

Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. There is a SQL injection vulnerability in the background of KYXSCMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Vulnerability in KKCMS

KKCMS is an open source video capture and playback system. The system is mainly used to automatically collect film and television resources and provide online playback capabilities. KKCMS has a SQL vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in FE Business Assistance Platform (CNVD-2020-69475)

Zhuhai Feiqi Software Co., Ltd "Feiqi Software", founded in 1998 formerly Zhuhai UFIDA Software Co., Ltd. was founded in 1998, is a software vendor focusing on the research, development and service of industry collaboration and integration platform. A SQL injection vulnerability exists in FE...

SQL Injection Vulnerability in FE Business Assistance Platform

Zhuhai Feiqi Software Co., Ltd "Feiqi Software", founded in 1998 formerly Zhuhai UFIDA Software Co., Ltd. was founded in 1998, is a software vendor focusing on the research, development and service of industry collaboration and integration platform. A SQL injection vulnerability exists in FE...

SQL Injection Vulnerability in Miwei Smart Party School System

Chongqing Miwei Technology Co., Ltd. is a leading provider of intelligent party school construction and solutions. There is a SQL injection vulnerability in the Mimi Smart Party School system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Multimedia Library of Jiangsu Suqian Jindian Technology Co.

Jiangsu Suqian Jindian Technology Co., Ltd. is a private high-tech company, the company is committed to education informatization, library management informatization and library equipment research and development and production, and provide comprehensive solutions. A SQL injection vulnerability...

Cisco IoT Field Network Director Access Control Error Vulnerability (CNVD-2020-72728)

Cisco IoT Field Network Director IoT-FND is an end-to-end IoT management system from Cisco USA. The system features device management, asset tracking and smart metering. A security vulnerability exists in Cisco IoT Field Network Director FND that stems from affected software not properly validati...

SQL Injection Vulnerability in the Standard Version of RAS Remote Rapid Application Access Solution of Shenzhen Techmart Communication Technology Co.

Shenzhen Techmart Communication Technology Co., Ltd. is a high-tech enterprise in the field of intelligent IOT. Techmart Communication integrates IOT technology research, intelligent product development and IOT platform service, and is an enterprise with great innovative potential. SQL injection...

SQL Injection Vulnerability in waychar enrollment system VER 0.30

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in waychar registration system VER 0.30, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Website Building System of Liaoning Huarui Technology Co.

Huarui Technology is a high-tech IT company committed to the field of Internet application services, in line with the "beyond innovation, long-term service, the pursuit of excellence, excellence" business philosophy, based in Liaoning, radiation, according to the needs of enterprise information...

SQL Injection Vulnerability in Waychar Enrollment System VER 0.30 Article Query Function

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the VER 0.30 article query function of the waychar registration system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Incu Online Education System (CNVD-2020-67116)

Incu online education system is the Java version of the open source online school source code building system . SQL injection vulnerability exists in Incu Online Education System. Attackers can use the vulnerability to obtain sensitive information in the database...

OpenCart Theme Journal 3.1.0 - Sensitive Data Exposure

Exploit Title: OpenCart Theme Journal 3.1.0 - Sensitive Data Exposure Date: 11-06-2020 Vendor Homepage: https://www.journal-theme.com/ Vendor Changelog: https://docs.journal-theme.com/changelog Exploit Author: Jinson Varghese Behanan @JinsonCyberSec Author Advisory:...

SQL injection vulnerability in the front-end ad***_mo***_se***.php page of Shield Spirit Commodity Promotion System

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

CVE-2020-4692

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain sensitive information from the Dashboard UI. IBM X-Force ID: 186780...