SQL Injection Vulnerability in UQCMS B2B2C E-commerce System

UQCMS is a lightweight shopping software, light application, light deployment, multiple clients with different presentations.PHP+MySql easy to build, Smarty template tags, two open more convenient. Can be used for free for business. UQCMS B2B2C e-commerce system suffers from a SQL injection...

Nextcloud: SSRF on local storage of iOS mobile

The tester uploaded the text file, containing "test ssrf" message, in order to proof SSRF attack. 2. Next, the tester uploaded the common file and then manipulate the content and extension file to html format in order to find the application path: 3. The tester access that file and found the...

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2019-46625)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SQL Injection Vulnerability in RGcms Backend

RGcms is an open source building management system , written in PHP language , the system features free , extended , extremely fast security , free and open source . RGcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

SQL injection vulnerability in the fo***.class.php file of Laikai e-commerce management system

Laike e-commerce management system is an open source e-commerce management system. Laike e-commerce management system fo.class.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in phpyun in***.class.php file

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. The phpyun in.class.php file contains a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in OpenSNS Backend

OpenSNS is a comprehensive social software developed by Thinking Sky. A SQL injection vulnerability exists in the OpenSNS backend, which can be exploited by attackers to obtain sensitive database information...

Unspecified Vulnerability in PuTTY

PuTTY is a suite of free Telnet, Rlogin and SSH client software from Simon Tatham Software Developers. The software is primarily used for remote administration of Linux systems. A security vulnerability exists in PuTTY versions prior to 0.73. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in Kaixin Quote System V2.0 da***.aspx Page

The QI Quotation System is primarily for use by manufacturing companies. For incoming BOM list price monitoring. The system will automatically record the past quoted prices of BOM products, so that the purchasing staff can easily give new quotes. A SQL injection vulnerability exists in the Qixing...

SQL Injection Vulnerability in Experimental Teaching Management System of Shanghai Wanxin Computer Information Technology Co.

Shanghai Wanxin Technology Company is a private high-tech enterprise established in June 2001, which is mainly engaged in the research, development, production and sales of university laboratory informationization management platform and computer information system security protection products, a...

SQL injection vulnerability in the en***.cl***.php file of Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system en.cl.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in the ad***.php page of Tuan ah VIP movie system (CNVD-2019-43831)

Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. A SQL injection vulnerability exists in the ad.php page of Tuan Ah VIP Movie System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in us*** Parameters of BioReda's Security Management System Platform

Based on the latest B/S architecture design, Bio Raider Security Management Platform is a digital, networked and security integrated system platform. Bio Raider Security Management System can be applied to government, enterprises, prisons, schools, smart communities and other security requirement...

CVE-2019-4509

IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authenticated user to obtain sensitive information. IBM X-Force ID: 164430...

CVE-2019-4334

IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against the system. IBM X-Force ID: 161271...

wget: Information exposure in set_file_metadata function in xattr.c

setfilemetadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information e.g., credentials contained in the URL by reading this attribut...

SQL Injection Vulnerability in JeePlus Rapid Development Platform

JeePlus rapid development platform is an integrated code generator java rapid development framework . A SQL injection vulnerability exists in JeePlus Rapid Development Platform. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in PHPMyWind Website Building System (CNVD-2019-43878)

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . There is a SQL injection vulnerability in the PHPMyWind website builder system, which can be exploited by an attacker to obtain sensitive information from the database...

SQL injection vulnerability in seacms backend (CNVD-2019-43676)

SeaCMS is based on PHP + MySql technology development of video on demand ocean film and television management system seacms, ocean CMS is based on PHP + MySql technology development of video on demand system. There is a SQL injection vulnerability in the backend of seacms, which can be exploited ...

SQL injection vulnerability in seacms backend (CNVD-2019-43682)

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the backend of seacms, which can be exploited by attackers to obtain sensitive database information...