ChurchCRM ListEvents.php File SQL Injection Vulnerability

ChurchCRM is an open source church management system. ChurchCRM suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the WhichType parameter in the src/ListEvents.php file. No details of the vulnerability are provided at this ti...

Ding Xiang multi-user online customer service system vulnerabilities-vulnerability warning-the black bar safety net

Use's blog Ding Xiang multi-user online customer service system is an enterprise-level Web site real-time Exchange System, web site visitors simply click on the page the dialogue in the icon, without having to install or download any software, you can direct and web customer service staff for...

CVE-2006-6254

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content source code of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conncahierdetexte.php. NOTE: it is not clear...