SQL Injection Vulnerability in ECSHOP v2.7.3 by Merchant Pie Software Ltd.

ECShop is a professional e-commerce mall system. A SQL injection vulnerability exists in ECSHOP v2.7.3 of Merchant Pie Software Limited, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in p***.php page of website building system of Inner Mongolia Wando Information Technology Co.

Wando Technology is an information technology company dedicated to enterprise informatization application services, in order to actively promote the development of enterprise informatization and e-commerce, because of the transparency, so the integrity of the enterprise policy. It is an applicati...

SQL injection vulnerability in Shanghai Zhihu Information Technology's website bu***_de*** system

Shanghai Zhihu Information Technology Co., Ltd. precipitated 5 years, each industry comprehensive business scenarios, combined with the ability of technological innovation, to provide social e-commerce, home furnishing industry, tourism and travel and other areas of the solution. Shanghai Zhihu...

Teclib GLPI SQL Injection Vulnerability (CNVD-2020-44905)

Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A SQL injection vulnerability exists in Teclib GLPI versions prior to 9.5.1...

Introduction to SQL: Examples, Best Practices and Pitfalls

SQL Structured Query Language has been with us for more than half a century and it’s not going away anytime soon. Popular in both traditional relational databases and newer NoSQL databases technologies, SQL is widely used for data analytics, Big Data processing, coding languages, and more. I’m a...

MunkiReport SQL Injection Vulnerability (CNVD-2020-42246)

Munkireport is a reporting tool for the Munki software management program. A SQL injection vulnerability exists in the TableQuery.php file in MunkiReport versions prior to 5.6.3. The vulnerability can be exploited by an attacker to execute arbitrary SQL commands by sending a POST request to...

Ltd. cross-border e-commerce integrated platform has SQL injection vulnerability

Ltd. was founded in 2013 as an information technology service provider. Ltd. cross-border e-commerce integrated platform suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in BEESCMS

BEESCMS adopts PHP+MYSQL is a multi-language system, the content module is easy to expand, and the template style is diversified. BEESCMS SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Suzhou Huzhong Network Technology Co.

Suzhou Huzhong Network Technology Co., Ltd. twelve years to provide website construction services, SEO ranking optimization, website promotion, micro-marketing and other services; mainly serves in Suzhou and surrounding areas of enterprises and institutions. Suzhou HUZZHOU Network Technology Co.,...

SQL Injection Vulnerability in 5vshop E-commerce System of Shijiazhuang Zhenhong Network Technology Co.

5vshop belongs to Shijiazhuang Zhenghong Network Technology Co., Ltd, since 2004 has been committed to the enterprise Internet application of related services, engaged in enterprise, personal e-commerce website construction; e-commerce project planning, creativity, operation, to provide a...

Cisco SD-WAN vManage Software SQL Injection Vulnerability (CNVD-2020-42256)

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A SQL injection vulnerability exists in the web management interface in Cisco SD-WAN vManage Software versions prior to 18.4.5 and 19.2.3, which stems from the program failin...

SQL Injection Vulnerability in Nantong Dot Cool Network Technology Co.

Nantong Dot Cool Networks Technology Co. Since its inception, the company has provided many groups of enterprises and listed companies with perfect industry website construction solutions. There is a SQL injection vulnerability in Nantong Dot Cool Network Technology Co., Ltd's Beehive website...

Sichuan Institute of Safety Science and Technology Coal Mine Remote Monitoring Comprehensive Management System 2016 Version Exists SQL Injection Vulnerability

Sichuan Province coal mine remote integrated monitoring system is a system that can realize remote real-time monitoring of coal mine underground sensing data through the Internet and summarize, analyze and alarm the integrated monitoring and management in a timely manner. Sichuan Institute of...

ArticaTech Artica Proxy SQL Injection Vulnerability

ArticaTech Artica Proxy is an open source Artica proxy solution from the French company ArticaTech. A SQL injection vulnerability exists in ArticaTech Artica Proxy Community Edition versions prior to 4.28.030.418. The vulnerability stems from a lack of validation of externally entered SQL...

SQL Injection Vulnerability in IBOS Office (CNVD-2020-41793)

IBOS is a collaborative office management system based on PHP development. The IBOS office system suffers from an SQL injection vulnerability, which can be exploited by attackers to gain access to sensitive database information...

Zhucheng City Three Swords Network Media Co., Ltd. website system has SQL injection vulnerabilities

Zhucheng City Three Swords Network Media Co., Ltd. for the Internet web application development company, which for many customers to establish an online shopping mall web system. There is a SQL injection vulnerability in the website system of Zhucheng City Three Swords Network Media Co., Ltd, whi...

SQL Injection Vulnerability in 3D Indoor Tour System of Zhejiang Yongtuo Information Technology Co.

Zhejiang Yongtuo Information Technology Co., Ltd. is a technology provider focusing on 3D as a presentation method to solve the physical spatial relationship, and is committed to becoming the world's leading 3D visualization enterprise, providing customers and partners with comprehensive services...

Cisco SD-WAN vManage Software SQL Injection Vulnerability

Cisco SD-WAN vManage Software is a software-defined wide area network SD-WAN configuration management software provided by Cisco to monitor and manage an organization's SD-WAN routers. An SQL injection vulnerability exists in Cisco SD-WAN vManage Software versions prior to 19.2.2 and prior to...

SQL Injection Vulnerability in the Co***.cl***.php File of Nethub's Chinese/English Enterprise Website Management System

Netizen Chinese and English enterprise website management system is developed with PHP + MYSQL technology and MVC mode, easy to maintain the code, support pseudo-static function, can generate google and baidu map, support custom url, keywords and description, in line with SEO standards. Nethub...

CVE-2020-7577

A vulnerability has been identified in Camstar Enterprise Platform All versions, Opcenter Execution Core All versions V8.2. Through the use of several vulnerable fields of the application, an authenticated user could perform an SQL Injection attack by passing a modified SQL query downstream to th...