SQL Injection Vulnerability in Acme cms

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. Acme CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

PT-2019-16964 · Ibm · Ibm Tririga Application Platform

Name of the Vulnerable Software and Affected Versions: IBM TRIRIGA Application Platform versions 3.5.3 through 3.6.0 Description: The issue may disclose sensitive information that is only available to a local user, which could be used in further attacks against the system. Recommendations: For...

PT-2019-18195 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 11.6.1 through 11.6.3.4 F5 BIG-IP versions 11.5.2 through 11.5.8 Description: The issue allows sensitive configuration objects to be expose...

CVE-2019-4146

CVE-2019-4146 affects IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.0.1 . The vulnerability is an information disclosure that could allow an authenticated user to obtain sensitive document information under unusual circumstances. The IBM security bulletin for this CVE (and CVE...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Build Forge (CVE-2018-1890;CVE-2019-2426;CVE-2018-3139;CVE-2018-3180;CVE-2018-12547)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Rational Build Forge. IBM Rational Build Forge has addressed the applicable CVEs. Vulnerability Details Rational Build Forge has addressed the following vulnerabilities: If you run your own Java co...

SQL Injection Vulnerability in dhcms Frontend

dhcms is an enterprise building system. A SQL injection vulnerability exists in the frontend of dhcms, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in VANOC Enterprise Website Management System

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. VANOC enterprise website management system has SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL injection vulnerability in the ch***.asp file of the enterprise website management system of Dynamic Science (CNVD-2019-13589)

Dynamic enterprise website management system is an asp + access for the development of enterprise website source code. There is a SQL injection vulnerability in the ch.asp file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Sensitive Data Exposure

Overview Versions of sequelize-cli prior to 5.5.0 are vulnerable to Sensitive Data Exposure. The function filteredURL does not properly sanitize the config.password value which may cause passwords with special characters to be logged in plain text. Recommendation Upgrade to version 5.5.0 or later...

SAP NetWeaver Process Integration Information Disclosure Vulnerability (CNVD-2019-09637)

SAP NetWeaver is a service-oriented application and integration platform for SAP applications to provide a development and runtime environment can also be used and other applications and systems for custom development and integration. An information disclosure vulnerability exists in SAP NetWeave...

PT-2019-6172 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.6 Description: The issue is related to the exposure of sensitive information to unauthorized actors. It involves the IsNextToken function in the src/base/PdfToenizer.cpp component, which can be exploited by attackers to...

CVE-2018-1917

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclose sensitive information. IBM X-Force ID: 152784...

SQL Injection Vulnerability in Website Building System of Suzhou Weilian Network Technology Co.

Suzhou Weilian Network Technology Co., Ltd. is an enterprise e-commerce service-oriented technology enterprises. There is a SQL injection vulnerability in the website building system of Suzhou Weilian Network Technology Co. Attackers can use the vulnerability to obtain sensitive information in th...

SQL Injection Vulnerability in Zhirui School Course Selection System

Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System suffers from SQL...

Flash Player < 27.0.0.187 Multiple Vulnerabilities (APSB17-33)

Binary data 700427.prm...

Directory Traversal Vulnerability in NetSoft Zhicheng Classifieds Website System

NetSoft Zhicheng classifieds website system is a php mysql based website building system. NetSoft Zhicheng classifieds website system has a directory traversal vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Jommla! Re*** Component

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Jommla!Re component, which can be exploited by an attacker to obtain sensitive information from the database...

GHSA-8CW6-5QVP-Q3WJ Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL

In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark cluster's UI's job and stage info pages, and if a user can be tricked into accessing the URL, can be used to cause script to execute and expose information from the...

SQL Injection Vulnerability in UsualToolCMS

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. UsualToolCMS suffers from a sql injection vulnerability, which can be exploited by an attacker to obtain sensitive database information...

SQL Injection Vulnerability in HNCMS Search Module

HNCMS is based on PHP + MYSQL as the core development, free + open source Chinese labeling system. HNCMS search module SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...