Foshan City Suhu Network Technology Co., Ltd. building system there are SQL injection vulnerabilities

Foshan City, Sohu Network Technology Co., Ltd. is a commitment to provide a full range of web site construction services for the enterprise Internet company. Foshan City, Sohu Network Technology Co., Ltd. building system there is a SQL injection vulnerability, attackers can use the vulnerability ...

SQL Injection Bypass Vulnerability in CloudLock windows version

CloudLock is a free server security management software based on operating system kernel hardening technology, which supports cross-platform real-time, batch and remote security management of windows/linux servers. There is a SQL injection bypass vulnerability in the windows version of CloudLock,...

SQL Injection Vulnerability in Jinwei Intelligent Restaurant System

Jinwei Smart Restaurant System is a free restaurant management software. It is suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, western food, hot pot restaurant and other kinds of catering business. SQL injection vulnerability exists in Jinwei Intelligent...

The vulnerability of the “setMethod” function in the Symfony/HTTP-Foundation software for web application development and management lies in the lack of measures to protect SQL query structures. This allows attackers to execute arbitrary code through SQL injection attacks.

The vulnerability of the “setMethod” function in the Symfony software platform for web application development and management is related to the lack of measures to protect SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary code through SQL injection...

Heybbs us***_re***.php file suffers from SQL injection vulnerability

Heybbs is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community programs. A SQL injection vulnerability exists in the Heybbs usre.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in SemCMS SE***_Qu***.php File

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEQu.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...

EjuCMS suffers from SQL injection vulnerability

EjuCMS is a localized O2O real estate website platform system. EjuCMS suffers from an SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...

LJCMS suffers from SQL injection vulnerability (CNVD-2020-18760)

LJCMS is a free and open source content management system. LJCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in uqcms cloud commerce system (CNVD-2020-18781)

uqcms is a lightweight shopping software, light application, light deployment, multiple clients with different presentations.PHP+MySql easy to build, Smarty template tags, two open more convenient. Can be used for free for business. SQL injection vulnerability exists in uqcms cloud commerce syste...

MyuCMS open source content management system In***.php file SQL injection vulnerability

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. MyuCMS open source content management system In.php file SQL injection vulnerability . Attackers can exploit the vulnerability to obtain...

Progress Software MOVEit Transfer SQL Injection Vulnerability (CNVD-2020-19007)

Progress Software MOVEit Transfer is a suite of file transfer software from Progress Software, USA. A SQL injection vulnerability in the REST API in Progress Software MOVEit Transfer version 2019.1 before 2019.1.4 and version 2019.2 before 2019.2.1 can be exploited by an attacker to access the...

SQL Injection Vulnerability in UQCMS B2B2C E-commerce System

UQCMS is a lightweight shopping software, light application, light deployment, multiple clients with different presentations.PHP+MySql easy to build, Smarty template tags, two open more convenient. Can be used for free for business. UQCMS B2B2C e-commerce system suffers from a SQL injection...

The vulnerability in the vManage web interface of Cisco SD-WAN’s programmatically defined network allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability in the vManage web interface of Cisco’s programmable network architecture involves a lack of protection for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

PT-2020-1843 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 3.9 to 6.0.3 Description: The issue is related to a lack of input checks for SQL queries, which might allow an attacker to perform SQL injection attacks against the backend database. This could potentially be exploited by a...

CVE-2020-3934

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

Jobberbase SQL Injection Vulnerability (CNVD-2020-04571)

Jobberbase is an open source platform for building job search websites. A SQL injection vulnerability exists in Jobberbase. The vulnerability stems from a lack of validation of externally entered SQL statements in the database-based application. An attacker can exploit this vulnerability to execu...

PT-2020-1616 · Microsoft · Sql Server Reporting Services +1

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Reporting Services versions 2012 through 2016 Description: A remote code execution issue exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. This could allow an attacker to execute...

Plone DTML SQL Injection

Plone is free and open source content management system. Plone DTML suffers from SQL injection, which can be exploited by remote attackers to submit a special SQL request to manipulate the database, which can obtain sensitive information or execute arbitrary code...

The vulnerability in HMI/SCADA Equinox Control Expert, related to the failure to protect the SQL query structure, allows a intruder to gain unauthorized access to protected information.

The vulnerability in HMI/SCADA Equinox Control Expert relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by sending specially crafted SQL queries to the database...

CVE-2019-12619

A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could...