SQL injection vulnerability in the frontend of Queue Evaluation Integrated Management System V5.3 (CNVD-2019-41011)

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. SQL injection vulnerability exists in the frontend of Queue Evaluation Integrat...

SQL Injection

Overview knex is a query builder for PostgreSQL, MySQL and SQLite3 Affected versions of this package are vulnerable to SQL Injection. None Remediation Upgrade knex to version 0.19.5 or higher. References - GitHub Commit - GitHub PR Credit: Snyk Security Research Team...

S-CMS php version enterprise website building system v3.0 SQL injection vulnerability in background aj*** N*** parameters (CNVD-2019-40101)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS php version of the enterprise website building system v3.0 background aj N parameter there is a SQL injection vulnerability, t...

SQL Injection Vulnerability in Student Assessment System of Citycom Technology

Shandong Chengtong Technology Co., Ltd. is a company mainly engaged in the development and sale of computer software and hardware; computer system integration services and other projects. There is a SQL injection vulnerability in the Student Literacy Assessment System of Chengtong Technology, whi...

S-CMS php version enterprise website builder system v3.0 SQL injection vulnerability in background aj***2 parameter

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS php version of the enterprise website building system v3.0 background aj2 parameters exist SQL injection vulnerability,...

Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The DDL system for managing MySQL databases involves deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the InnoDB component in the MySQL Database Management System allows attackers to gain access to modify, add, or delete data, causing system downtime or service failures.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data, causing system downtime or service failures...

The vulnerability of the “symfony/dependency-injection” service identifier on the Symfony software platform for web application development and management arises from the lack of protective measures for SQL query structures. This allows attackers to execute arbitrary code through SQL injection attacks.

The vulnerability of the “symfony/dependency-injection” service identifier on the Symfony software platform for web application development and management is related to the lack of measures to protect SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary code...

eBrigade SQL Injection Vulnerability (CNVD-2019-35770)

eBrigade is a rescue team management system. The system includes personnel management, vehicle management and equipment management. A SQL injection vulnerability exists in eBrigade versions prior to 5.0, which can be exploited by attackers to execute illegal SQL commands...

ShopsN open source mall system In***::go*** file with SQL injection vulnerabilities

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd. an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system . ShopsN open source mall system In::go file there is a SQL injection...

SQL Injection Vulnerability in the Basic Website of Shenzhen Tiandixin Network Technology Co.

Founded in 2010, Tiandixin Network is an enterprise mainly focusing on corporate website construction, Baidu home page natural ranking, domain name registration, space rental, enterprise post office, 400 telephone, corporate VI design, electronic album production and other services. The basic...

SQL Injection Vulnerability in Kaixin Quote System V2.0

Qixing Quotation System V2.0 is a general management system developed for material quotations. The Qixing Quotation System V2.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in VANOC Enterprise Website Management System c****r.php Page

Fanno enterprise website management system is a website construction system developed by Cangzhou City Fanno Advertising Media Co. Vanno enterprise website management system cr.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

CVE-2019-16383

MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized access to the database. Depending on the database engine being used MySQL, Microsoft SQL Server, or Azure SQL, an attacker...

SQL injection vulnerability in zzcms 2019 frontend (CNVD-2019-37717)

zzcms webmaster Merchants content management system, developed by the zzcms team, into the database optimization, content caching, AJAX and other technologies, so that the site's security, stability, load capacity to get a reliable protection. Open source, independent functional modules, to...

SQL Injection Vulnerability in the Website Building System **fo.asp Page of Anshan China Domain Network Technology Co.

Ltd. is a high-tech network company that specializes in website building and website construction. Ltd. website building system fo.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information such as database...

S-CMS e-commerce system aj***.php page L_*** parameter has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page L parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

WordPress kama-clic-counter plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. kama-clic-counter is a plugin that uses the page download feature in it. A SQL injection vulnerability exists in version 3.4.9 of the...

CVE-2019-16309

FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...

SQL Injection Vulnerability in the Frontend Web*** of Nanjing Benan's Hidden Trouble Detection and Management Information System for Work Safety Accidents v2.3

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. Nanjing Benan Safety Production Accident Hidden Trouble Detection and Management Information System v2.3 There exists a SQL injection...