XSS Vulnerability in eyoucms Version V1.4.4

eyoucms is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source CMS. eyoucmsV1.4.4 version of the XSS vulnerability , attackers can use the vulnerability to obtain sensitive information on the site...

SQL Injection Vulnerability in DSO2O

DSO2O is an O2O takeaway system launched by Changsha Deshaun Network Technology Co. DSO2O suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Shenzhen Point Search Technology Co., Ltd. website building system has SQL injection vulnerabilities

Shenzhen Point Search Technology Co., Ltd. is an Internet + lawyers + private customized service providers, specializing in providing lawyers with domain name registration, website construction, optimization and promotion, website hosting and maintenance, media release, full network marketing and...

CVE-2020-10508 Sunnet eHRD - Sensitive Data Exposure

Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confidential information...

CVE-2020-3921 Unisoon UltraLog Express - Sensitive Data Exposure

UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page...

CVE-2020-3921 Unisoon UltraLog Express - Sensitive Data Exposure

UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page...

SQL Injection Vulnerability in PHPSHE

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE has a SQL injection vulnerability, which ca...

Web exhibition PHP foreign trade enterprise website red style has SQL injection vulnerability

Netzhan Technology Beijing Century Netzhan Technology Co., Ltd. is an Internet service operator specializing in the field of exhibition shows. Nethub PHP foreign trade enterprise website red style SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

CVE-2020-4309

IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. IBM X-Force ID: 177080...

SQL Injection Vulnerability in joyplus-cms ad***_vo***_to***.php File

joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . joyplus-cms advoto.php file contains a SQL...

CVE-2019-4719

IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data...

SQL Injection Vulnerability in Xinhou Collaboration Office System (CNVD-2020-23543)

Xinhuo Co-operation Office System is an open source and cross-platform office system. There is a SQL injection vulnerability in Xinhao Collaboration Office System, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in us***.php file of Jinwei Mobile Mall system

Jinwei mobile mall system is a micro-business customers with a public number, imitation hand Tao page layout, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory control, subdivided...

SQL injection vulnerability in EjuCMS Us***.php file (CNVD-2020-23628)

EjuCMS is a localized O2O real estate website platform system. A SQL injection vulnerability exists in the EjuCMS Us.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Joyplus CMS ad***_ap***_co***.php File

Joyplus CMS Joy Video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . Joyplus CMS adapco.php file contains a SQL...

Ansible Information Disclosure Vulnerability (CNVD-2020-16727)

Ansible is a computer system configuration manager from the American company Ansible. The product can be used to publish, manage and organize computer systems. A security vulnerability exists in Ansible. An attacker can exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Website Building System of Shanghai Enterprise Torch Advertising Media Co.

Ltd. is one of the early technology-based companies in China to provide high-quality Internet application services for enterprise information construction. There is a SQL injection vulnerability in the website system of Shanghai Enterprise Torch Advertising Media Co., Ltd. that can be exploited b...

SQL injection vulnerability in website building system li***.php page of Daqing Jiujiu Network Technology Co.

Daqing JiuJiu Network Technology Co., Ltd. is a technology-based service enterprise diversified in the field of full network marketing, enterprise e-commerce, network information technology services. Daqing JiuJiu Network Technology Co., Ltd. building system li.php page SQL injection vulnerabilit...

WP Security Audit Log < 4.0.2 - Broken Access Control in First-Time Install Wizard

Broken access control vulnerability affecting version 4.0.1 and below that could lead to privilege escalation, sensitive data exposure and insecure deserialisation. To exploit the vulnerability, the wizard must not have been completed, otherwise it won’t work...

SQL Injection Vulnerability in Jinwei Smart Restaurant System (CNVD-2020-22749)

Jinwei Intelligent Restaurant System is an internal management system for all major and small restaurants. Jinwei Intelligent Restaurant System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...