SQL Injection Vulnerability in the Community Corrections System of the Department of Justice

China Mobile Communications Corporation hereinafter referred to as "China Mobile" is a centralized enterprise established in 2000 in accordance with the overall deployment of the national telecommunications system reform. A SQL injection vulnerability exists in the community correction system of...

S-CMS SQL Injection Vulnerability (CNVD-2018-26679)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in S-CMS version 1.0, which can be exploited by remote attackers to execute SQL commands by sending the 'Sid' parameter to the wapindex.php?type=newsinfo URL...

SQL Injection Vulnerability in File System Profile Frontend ge***.aspx Page

The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the front-end ge.aspx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Purchase Frontend ge***.aspx Page of Purchase System

Purchase system Purchase is a purchasing management system features include: product requisitioning, warehousing, inventory counts, data reports and more. A SQL injection vulnerability exists in the front-end ge.aspx page of Purchase, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in File System Profile Frontend Bi***.ashx Page

The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the frontend Bi.ashx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in PHPMyWind si***_up***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind siup.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in PHPMyWind na***_up***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind naup.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

Zzzphp V1.5.9 SQL Injection Vulnerability in Background sa***.php File

zzphp is a free website building system developed using PHP. Zzzphp V1.5.9 SQL injection vulnerability exists in the background sa.php file, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in PbootCMS Backend

PbootCMS is a new core open source enterprise building system developed by Avantech. There is a SQL injection vulnerability in PbootCMS backend. Attackers can use this vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in UFIDA uMall

UFIDA U Mall realizes multi-dimensional product management, personalized shopping experience, comprehensive membership management, flexible marketing management, online and offline integration, and omni-channel O2O marketing solutions. A SQL injection vulnerability exists in UFIDA U Mall. An...

SQL Injection Vulnerability in Golden Magpie T3 Wooden Door Enterprise Management Software

Golden Magpie T3 series of wooden door software is developed by Nanjing Golden Magpie Software Technology Co., Ltd. and adopts the B/S architecture mode of an enterprise management system. Golden Magpie T3 Wooden Door Enterprise Management Software has a SQL injection vulnerability, which can be...

SQL Injection Vulnerability in Enzong Technology's Website Building System

Tianjin EnZhong Technology Development Co., Ltd. is a network application service operator and a top Internet industry solution company in China. There is a SQL injection vulnerability in EnZone's website building system, which can be exploited by attackers to obtain sensitive information from th...

HuCart has a file upload vulnerability

HuCart is a PHP+Mysql based enterprise building system CMS that can run on various server platforms such as Linux and Windows. HuCart has a file upload vulnerability that can be exploited by attackers to upload arbitrary files...

SQL injection vulnerability in the or***.de***.php file in the background of Cloud EC e-commerce system

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system background or.de.php file SQL injection vulnerability. Attackers can use the...

Dandelion Online Teaching System frontend ex*** routing file has SQL injection vulnerability

Dandelion Online Teaching System is the website of Shenzhen Tomorrow See Technology Co., Ltd, which is an innovative science and technology enterprise focusing on the research and development of videoconferencing, video teaching and telemedicine system. Dandelion Online Teaching System has a SQL...

SQL Injection Vulnerability in CCTV Online Teaching Platform

CCTV Digital Resource Teaching Platform is a platform for flexible lesson preparation and convenient teaching created for schools by Nanjing 55th Technology Development Co. A SQL injection vulnerability exists in the CCTF Online Network Teaching Platform. An attacker can use this vulnerability to...

PHPOK 5.0.055 suffers from a SQL Injection Vulnerability

PHPOK system is a content management system for website construction developed by Shenzhen 锟铻科技有限公司formerly known as PHPOK Studio. A SQL injection vulnerability exists in PHPOK 5.0.055. The vulnerability is caused by poor filtering of user-submitted parameters. An attacker can exploit this...

SQL Injection Vulnerability in D-link Central WifiManager Ra***.php Page

D-Link Central WiFiManager is D-Link centralized wireless management software. A SQL injection vulnerability exists in the D-link Central WifiManager Ra.php page, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in HUCART ad***_po***.php Page

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version adpo.php page SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Incentive Technology's Website Construction System

Ltd. is a network company specializing in Internet technology services, network technology development and application in one. A SQL injection vulnerability exists in the website construction system of Incentive Technology. An attacker can use this vulnerability to obtain sensitive information in...