SQL Injection Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.(CNVD-2020-33072)

Digital campus is based on digital information and network, established on computer and network technology for the collection, processing, integration, storage, transmission and application of campus information on teaching, scientific research, management, technical services, life services, etc....

SQL Injection Vulnerability in Multiple Versions of Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. SQL injection vulnerability exists in several versions of imcat. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Li Lei's Blog

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Yixing Yifa Network Service Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2020-32570)

Yixing Yifa Network Service Co., Ltd. is a company with website construction, WeChat public platform, WeChat marketing as the main business. Yixing Yifa Network Service Co., Ltd. website building system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive informati...

SQL Injection Vulnerability in the Website Building System of Hainan Creative Future Culture and Media Co.

Hainan Creative Future Culture Media Co., Ltd. is an excellent enterprise engaged in brand one-stop website construction services. Hainan Creative Future Culture Media Co., Ltd. station building system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitiv...

SQL Injection Vulnerability in New Smart Drawing Software Management Platform

Zhejiang Provincial Surveying and Mapping Brigade is subordinate to Zhejiang Provincial Geological Survey Bureau, which was established in 1958, is a provincial-level institution specialized in surveying and mapping, and is one of the first batch of Class A surveying and mapping qualification uni...

NetApp Element OS and HealthTools Information Disclosure Vulnerability

NetApp Element OS and NetApp Element HealthTools are both products of the U.S.-based NetApp Corporation.NetApp Element OS is a suite of large-scale data management software for NetApp HCI hyperconverged infrastructure and SolidFire storage solutions.NetApp Element HealthTools is a tool primarily...

SQL Injection Vulnerability in Markpoint's Construction Engineering Quality Inspection System

Construction engineering quality testing system is a set of national standards to achieve the evaluation of the physical properties of building materials, and to achieve self-help commissioning, registration of samples, automatic collection and calculation, automatic generation of reports, query...

wego.co.za Cross Site Scripting vulnerability OBB-1166257

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Xi'an Bailian Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Xi'an BaiLian Network Technology Co., Ltd. is a domestic technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. website building system SQL injection vulnerability, attackers can use the...

SQL Injection Vulnerability in the Group Edition of Fanzhi Hotel Human Capital ES Management Platform of Hangzhou Yishixing Information Technology Co.

Ltd. is a high-tech enterprise entity specializing in system development, integration and services in the field of personnel and logistics card management in the hotel industry and RFID Internet of Things applications. Ltd. FANZI HOTEL HUMAN CAPITAL ES MANAGEMENT PLATFORM GROUP EDITION suffers fr...

Nitro Software Nitro Pro Information Disclosure Vulnerability

Nitro Software Nitro Pro is a U.S. Nitro Software PDF document editor software. The software supports PDF document editing, PDF document formatting and encryption of PDF documents and other functions. Nitro Software Nitro Pro has an information disclosure vulnerability that can be exploited by...

CVE-2020-13129

An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platforms. The GET method is used with clientkey and deviceid data in the query string, which allows attackers to obtain sensitive information by reading web-server logs...

SQL Injection Vulnerability in Health Collection and Reporting System of Shanxi Xianqi Technology Co.

The health collection and reporting system is developed by PHP+mysql and the code is completely open source for secondary development. Shanxi Xianqi Technology Co., Ltd. health collection and reporting system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

The vulnerability of the Accounts sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite enterprise automation system, allows a perpetrator to gain access to read data.

The vulnerability of the Accounts sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite enterprise automation system, is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain acce...

SQL Injection Vulnerability in Haiwell's Cloud SCADA Cloud Configuration Software

Haiwell Haiwell cloud configuration software Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. A SQL injection vulnerability exists in Haiwell Cloud SCADA, which can be exploited by an attacker to obtain sensitive...

Nantong Wanjia Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2020-30187)

Nantong Wanjia Network Technology Co., Ltd. is engaged in website construction, website design, high-end website production, network promotion and so on. Nantong Wanjia Network Technology Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerability to...

SQL Injection Vulnerability in Health Collection Reporting System (CNVD-2020-30198)

The health collection and reporting system is developed by PHP+mysql and the code is completely open source for secondary development. Health collection and reporting system has a SQL injection vulnerability, attackers can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Longyan Xunsou Network Technology Company Limited (CNVD-2020-30213)

Longyan Xunsou Network Technology Co., Ltd. is a company engaged in B2B e-commerce operation technology research and informationization services. There is a SQL injection vulnerability in Longyan Xunsou Network Technology Co., Ltd.'s website building system, which can be exploited by attackers to...

SQL Injection Vulnerability in LaySNS of Wuhan Classen Technology Co.

Laysns using Think + Layui as the technical basis for development, using the OOP approach to the basic operation of the framework to build, modular development approach to do for the form of functional development. Wuhan class Sen Technology Co., Ltd. LaySNS SQL injection vulnerability, attackers...