SQL Injection Vulnerability in Xintian Technology Intelligent Water Management and Control Integration Platform System

Xintian Technology Co., Ltd. provides products and intelligent solutions to achieve energy savings. A SQL injection vulnerability exists in Xintian Technology's Intelligent Water Management and Control Integration Platform system, which can be exploited by attackers to obtain sensitive informatio...

soccerfield SQL Injection Vulnerability

soccerfield is a small game for cell phones. A SQL injection vulnerability exists in soccerfield. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Legend Web Works Church Web Design and Management System (CCMS)

The CCMS was created and is managed by a group of Christians, and there are many similar church websites that utilize the CCMS. A SQL injection vulnerability exists in Legend Web Works Church Web Design and Management System CCMS, which can be exploited by an attacker to obtain sensitive...

CVE-2019-4707

IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 172018...

CVE-2020-5522

The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1529)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Experience Manager Page Injection Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A user...

SQL Injection Vulnerability in SmartPing

SmartPing is a comprehensive network quality PING inspection tool that supports forward/reverse PING mapping, mutual PING topology mapping and alerting, national PING latency maps and online inspection tools. SmartPing suffers from a SQL injection vulnerability. An attacker can exploit the...

SQL Injection Vulnerability in iCMS Backend da***.ad***.php File

iCMS is a content management system built with PHP and MySQL. A SQL injection vulnerability exists in the iCMS backend da.ad.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in ASP Free Version of VANOC Enterprise Website Management System

Vanno Enterprise Website Management System is a website content management system based on a full DIV+CSS template. VANOC Enterprise Website Management System ASP Free Edition suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Wenzhou Yougu Technology Co., Ltd. website building system SQL injection vulnerability

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Science and Technology Co., Ltd. station building system there are SQL injection...

Shijiazhuang Hejia Technology Co., Ltd. machine room dynamic ring monitoring system has information leakage vulnerability

The dynamic environment monitoring system of the server room is the monitoring function of the important environment and power and other equipment in the server room, including environmental equipment monitoring temperature, humidity, smoke, flooding, precision air conditioning, ordinary air...

Zhengzhou Weikou Network Technology Co., Ltd. yiqicms foreground ar***.php file SQL injection vulnerability

Yiqi CMS yiqicms is a content management system CMS for marketing-oriented enterprise websites. Zhengzhou Weikou Network Technology Co., Ltd. yiqicms front ar.php file SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in iWebShop of Jinan Ai Cheng Network Technology Co.

iWebShop is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source free mall system. Jinan Ai Cheng Network Technology Co., Ltd. iWebShop SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the...

Directory Traversal Vulnerability in Jiapeng Pharmaceutical Flow System

Jiapeng Pharmaceutical Flow System is a pharmaceutical software with B/S browser architecture. A directory traversal vulnerability exists in Jiapeng Medical Flow System, which can be exploited by attackers to obtain sensitive information and perform operations...

SQL Injection Vulnerability in us***.php page ty*** parameter of webstore website builder system

Xi'an BaiLian Network Technology Co., Ltd. is a domestic technology company specializing in bearing industry management software development and bearing industry portal design. Web mall building system us.php page ty parameters exist SQL injection vulnerability, attackers can use the vulnerabilit...

SQL Injection Vulnerability in Qixing Helpdesk kb***_ca***.aspx Interface

Kaixin HelpdeskHelpdesk is a system for dealing with day-to-day issues that helps IT collect the issues it deals with on a daily basis and generate reports to quantify the work. A SQL injection vulnerability exists in the kbca.aspx interface of Qixing Helpdesk, which can be exploited by attackers...

DEBIAN-CVE-2019-14864

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

PYSEC-2020-179

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

SQL Injection Vulnerability in Ride the Wind Multi-User PHP Statistics System vi***.php Page

Ride Multi-User PHP Statistics System supports multi-user applications, as well as website and online store statistics. A SQL injection vulnerability exists in the vi.php page of Ridewind Multi-User PHP Statistics System, which can be exploited by attackers to obtain sensitive information...