SQL injection vulnerability in seacms backend (CNVD-2019-43675)

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the backend of seacms, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Shanghai Kaijie Information Website Building System

Founded in 2009, Kaijie Information is a high-tech enterprise engaged in Internet application and software development, mainly serving in the field of e-commerce, e-government and enterprise Internet service. A SQL injection vulnerability exists in Shanghai Kaijie Information's website building...

Advantech WISE-PaaS/RMM XML External Entity Injection Vulnerability

Advantech WISE-PaaS/RMM is an IoT device remote monitoring and management platform. An XML External Entity Injection XXE vulnerability exists in Advantech WISE-PaaS/RMM 3.3.29 and earlier versions. An attacker can exploit this vulnerability to obtain sensitive data...

A Web-Driven World Needs Better Web Security

Web interfaces are everywhere. From social media sites to online shopping portals to your CRM, the humble web interface is now used to access much of the online world. So, it isn’t difficult to see why web applications are a prime target for cybercriminals. Because they’re used by customers and...

SQL Injection Vulnerability in the Front-end of the Intelligent Graphical Management System for Office Premises of New ChengSoft Technology Co.

The new ChengSoft intelligent graphic management system for office buildings adopts universal functional design, is a suitable for ministries and commissions, provinces, cities, districts and counties organ affairs management departments as well as large-scale enterprises, scientific research...

JetBrains Security Bulletin Q3 2019

FYI Security JetBrains Security Bulletin Q3 2019 Robert Demmer In the third quarter of 2019, we resolved a series of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...

IBM Cognos Controller Information Disclosure Vulnerability (CNVD-2019-39356)

IBM Cognos Controller is a suite of business intelligence and planning solutions from IBM in the United States. The product features process automation, financial audit control, and the creation and management of financial reports. An information disclosure vulnerability exists in IBM Cognos...

SQL injection vulnerability in UQCMS de***.php page

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. A SQL injection vulnerability exists in the UQCMS de.php page, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Waychar Enrollment System

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in seacms backend ad***_pa***.php file

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adpa.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in in***.php page of S-CMS government website builder system

S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a special government station building solutions to provide products. S-CMS government website building system in.php page SQL injection vulnerability, attackers can use the vulnerability to obtain...

SQL injection vulnerability in ad***_to***.php file pi*** parameter in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adto.php file pi parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in seacms backend ad***_ma***.php file

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adma.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

Xiamen Yi Shang Network Technology website building system SQL injection vulnerability

Xiamen Yi Shang Network Technology Co., Ltd. is one of the Internet application service providers; is a commitment to enterprise e-commerce consulting and solutions and enterprise information technology services, a professional IT company, with a number of products and services related to the...

SQL Injection Vulnerability in LJCMS us***.php File

LJCMS is a free and open source content management system. A SQL injection vulnerability exists in the LJCMS us.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SAP Landscape Management Log Information Disclosure Vulnerability

SAP Landscape Management is a centralized SAP product management system from SAP. The system is used to centrally manage and configure SAP software systems running in physical, virtual, and cloud infrastructures. A log information disclosure vulnerability exists in SAP Landscape Management. The...

photonicmoments.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-999083 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting photonicmoments.net websit...

SQL Injection Vulnerability in Personnel Management System of Coolidge University

Coolidge College Personnel Management System Software is a software for college personnel management business. There is a SQL injection vulnerability in the Kuchi College Personnel Management System that can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in OurPHP ou***_pa***.php Page

OurPHP is a web content management system developed using the PHP language. An SQL injection vulnerability exists in the OurPHP oupa.php page, which can be exploited by attackers to obtain sensitive information...

XSS Vulnerability in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co.

Ltd. specializes in the research, development and integration of one card system and campus payment platform. An XSS vulnerability exists in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co. An attacker can exploit this vulnerability to obtain sensitive information...