CVE-2020-4886

IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a user who has access to the same system. IBM X-Force ID: 190910...

MileagePHP open source blog system suffers from SQL injection vulnerability

MileagePlus open source PHP blog system is an open source blog system based on ThinkPHP. MileagePlus PHP open source blog system suffers from a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive database information...

BlueCMS suffers from SQL injection vulnerability (CNVD-2020-64617)

BlueCMS is a free professional local portal system developed by open source combination PHP + MYSQL, focusing on local portal CMS. BlueCMS suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in FangfaCms

Method Digital Web Content Management System FangfaCms is an enterprise-level PHPCMS website management system. A SQL injection vulnerability exists in the frontend Fl.cls.php of FangfaCms. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co.(CNVD-2020-64763)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

Shanxi Shanda Xinwang Technology Co., Ltd. customer self-management system there is a universal password login vulnerability

Shanxi Shanda New Network Technology Co., Ltd. is a high-tech company specializing in the development of industry application software products, software services, the company has long been committed to providing enterprise management software with independent intellectual property rights,...

SQL Injection Vulnerability in SETA Management System

The SETA Management System is software that assists instructors in their teaching duties and helps students participate in courses online, while supporting access to parts of the content by students not in the course and course management by administrators. The SETA Management System suffers from...

SQL Injection Vulnerability in JeewxBoot WeChat Manager Platform

JeewxBoot WeChat Butler Platform is a free JAVA WeChat Butler Platform that supports WeChat public number, small program, WeChat third-party platforms, sweepstakes and so on. JeewxBoot WeChat Butler Platform suffers from a SQL injection vulnerability that can be exploited by attackers to obtain...

Semrush: Critically Sensitive Spring Boot Endpoints Exposed

Spring Boot includes a number of additional features to help you monitor and manage your application when you push it to production. Hacker found that actuator endpoints containing potentially sensitive data such as internal tokens and service data were left public. Semrush has a microservices...

SQL Injection Vulnerability in RaiseDreams Crowdfunding System pr***.aspx File

RaiseDreams crowdfunding system is an enterprise-level crowdfunding website platform for financial tycoons and enterprises that are about to put into crowdfunding ranks, using asp.net+MsSQL database as the system architecture, and the front-end using html5+css3 modern html language to create a...

SQL Injection Vulnerability in the Construction System of Hangzhou BaZero Technology Co. Ltd (CNVD-2020-62387)

Hangzhou Ba Zero Technology Co., Ltd. is a collection of website construction, enterprise mailbox, 400 telephone, network integrated marketing, web design, cell phone version of the website production, e-commerce applications, graphic design and other information technology services. There is a S...

Atlassian Jira 8.6.x < 8.11.1 Sensitive Data Exposure

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.8 or 8.6.x 8.11.1. It is, therefore, affected by a sensitive data exposure vulnerability that allows remote, unauthenticated attackers to view custom field names and custo...

SQL Injection Vulnerability in the Website Building System of Shanghai Niomai Network Technology Co.

Niu Mai Network Technology is a software company focusing on serving small and medium-sized courier and logistics enterprises. Shanghai Niomai Network Technology Co., Ltd. station building system there is a SQL injection vulnerability attackers can use the vulnerability to obtain sensitive...

Atlassian Jira < 8.5.8 Sensitive Data Exposure

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.8 or 8.6.x 8.11.1. It is, therefore, affected by a sensitive data exposure vulnerability that allows remote, unauthenticated attackers to view custom field names and custo...

Jeecg-Boot suffers from SQL injection vulnerability (CNVD-2020-62597)

Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Jeecg-Boot suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive...

Shenzhen Huazhou Intelligent Manufacturing Technology Co., Ltd. Huazhou Cloud Industrial Internet Platform Exists SQL Injection Vulnerability

Headquartered in Shenzhen, China, Huazhou Intelligence is committed to globalization and technological innovation, and has set up overseas offices and research institutes in Germany, Japan, the United States and other countries. With the Industrial Internet Platform as the core carrier, Huasic...

LSN-0073-1 Kernel Live Patch Security Notice

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

USN-4600-1 netty-3.9 vulnerabilities

It was discovered that Netty had HTTP request smuggling vulnerabilities. A remote attacker could used it to extract sensitive information. CVE-2019-16869, CVE-2019-20444, CVE-2019-20445, CVE-2020-7238...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59313)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59402)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...