SQL injection vulnerability in the frontend fl***.php file of Dascommerce B2B2C multi-user mall system

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. A SQL injection vulnerability exists in the fl.php file of the B2B2C multi-user mall system. An attacker can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Taiyuan Tianxiang Technology Co.

Taiyuan Tianxiang Technology Co., Ltd. is a company that provides a series of services such as website construction, website design, website optimization, website maintenance, website promotion, seo optimization, marketing planning, internet marketing and so on. Taiyuan Tianxiang Technology Co.,...

Arbitrary File Download Vulnerability in Aifei Routing System

LoveFast Routing System is a DPI-based network management system. There is an arbitrary file download vulnerability in AIFRS, which can be exploited by attackers to download arbitrary files and obtain sensitive information...

GitLab Information Disclosure Vulnerability (CNVD-2020-03764)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

SQL Injection Vulnerability in the ma***.php Page of Golden Flavor Smart Order Payment Management System

Golden Flavor restaurant ordering payment management system is a restaurant ordering system developed in php. A SQL injection vulnerability exists in the ma.php page of the Golden Taste Smart Order and Payment Management System. An attacker can exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Catapult OA Mobile Cloud Office System

Catapult OA mobile cloud office system, the use of industry-leading cloud computing technology, based on the traditional Internet and mobile Internet, innovative cloud services + cloud terminal application mode, for enterprise users to provide an account management aggregation application service...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2020-01267)

Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Adobe Acrobat and Reader have out-of-bounds read vulnerability, attackers can use the vulnerability ...

EyouCms suffers from SQL injection vulnerability (CNVD-2020-02271)

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in zzzcms sa***.php Page

zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the zzzcms sa.php page, which can be exploited by an attacker to obtain sensitive information from the database...

Intel Baseboard Management Controller Input Validation Error Vulnerability (CNVD-2020-12690)

The Intel Baseboard Management Controller BMC is a baseboard management controller from Intel Corporation USA. An input validation error vulnerability exists in Intel BMC, which can be exploited by an attacker to obtain sensitive information...

SQL Injection Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.

Digital campus is based on digital information and network, established on computer and network technology for the collection, processing, integration, storage, transmission and application of campus information on teaching, scientific research, management, technical services, life services, etc....

Siemens SPPA-T3000 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SPPA-T3000 Vulnerabilities: Improper Input Validation, Deserialization of Untrusted Data, Improper Authentication, Cleartext Transmission of Sensitive Information, Unrestricted...

SQL Injection Vulnerability in the Frontend of Xinxiao Online Marking System

Xinkao Online Marking System is an online marking system for the majority of teachers and friends. Xinkao Online Marking System has a SQL injection vulnerability in the foreground, which can be exploited by attackers to obtain sensitive information from the database...

Red Sail OA system has SQL injection vulnerability

Redfan OA is based on SOA architecture, with EIP enterprise information portal and BPM business process engine as the core. Red Sail OA system has SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Unspecified vulnerability in CBC Gem application

CBC Gem application is an application for playing streaming videos. A security vulnerability exists in CBC Gem application versions prior to 9.24.1 Android and prior to 9.26.0 iOS. An attacker can exploit the vulnerability to capture sensitive information about and view some of the user's habits...

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-02207)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SQL injection vulnerability in the Ta***.cl***.php file in the backend of Dream CMS

Dream CMS short for "lmxcms" is an open source website management system cms with no license restrictions. A SQL injection vulnerability exists in the Ta.cl.php file in the background of Dream CMS. Attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Super CMS Content Management System Backend

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-01257)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

SQL Injection Vulnerability in 74cms

Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms SQL injection vulnerability, attackers can use the vulnerability to obtain...