Vulnerability fixed in Nexpose

A vulnerability has been fixed in Nexpose. The vulnerability allows an authenticated malicious party to execute an SQL injection to execute and thereby obtain sensitive data. Rapid7 has released updates to fix the vulnerability. More information can be found on the page below:...

Adobe Magento SQL Injection Vulnerability

Adobe Magento is the U.S. Odobie Adobe company's set of open source PHP e-commerce system. The system provides rights management , search engine and payment gateway and other functions.Magento Open Source is the open source version of Magento.Magento Commerce is the commercial version of Magento...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59409)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

ZZCMS suffers from a file upload vulnerability (CNVD-2020-59411)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...

SQL Injection Vulnerability in Shield Spirit Original Article Submission System 1.0

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in the Management Platform of Internet Service Establishments of the Public Security Bureau (CNVD-2020-60077)

Harbin Zhonglong Baiying Technology Development Co., Ltd. was established on May 29, 2013, mainly engaged in computer hardware and software, office automation equipment, security equipment and so on. A SQL injection vulnerability exists in the management platform of the Public Security Bureau's...

Doors and windows to join the network there are SQL injection vulnerabilities

Doors and windows to join the network is a with their own strong product development capabilities, to build a complete information, user-active accurate traffic platform, to the majority of small and medium-sized businesses and entrepreneurs to build an effective docking environment. Doors and...

SQL Injection Vulnerability in Qimage's Website Management System (Wim)

Hefei Qimai Network Technology Co., Ltd. specializes in website construction, website optimization, web hosting, domain name registration and other network services. A SQL injection vulnerability exists in Qimage's website management system Wim. Attackers can utilize this vulnerability to obtain...

SQL Injection Vulnerability in Liangshi Online School System of Wuhan Liangshi Online Education Technology Co.

Wuhan Liangshi Online Education Technology Co., Ltd. is headquartered in Wuhan City, which is the thoroughfare of nine provinces, and is a high-tech enterprise restructured and established by the Education and Information Technology Center of Optics Valley Computer School. There is a SQL injectio...

SQL Injection Vulnerability in Zhirui Teacher Records Management System

Zhi Rui Teachers File Management System is a free institution management system developed by Zhi Rui software team using asp+access. Zhirui Teacher File Management System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Anhui Huanmei Intelligent Technology Co., Ltd. pollution source online monitoring system has SQL injection vulnerability

Anhui Huanmei Intelligent Technology Co., Ltd. was founded in May 2007, and its business scope includes computer hardware and software, network products, communication products, communication products and so on. Anhui Huanmei Intelligent Technology Co., Ltd. has a SQL injection vulnerability in i...

SQL Injection Vulnerability in the Management Platform of Internet Service Establishments of Harbin Zhonglong Baiying Technology Development Co.

Harbin Zhonglong Baiying Technology Development Co., Ltd. was founded on May 29, 2013, mainly engaged in computer hardware and software, office automation equipment, security equipment and so on. Harbin Zhonglong Baiying Technology Development Co., Ltd. has a SQL injection vulnerability in the...

SQL Injection Vulnerability in Alencms

Dongguan Lightspeed Network is a large network company, specializing in providing website design services for the majority of small and medium-sized enterprises, government agencies, etc.. Alencms has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database...

DEBIAN-CVE-2020-26935

An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query...

SQL Injection Vulnerability in Shield Spirit Original Article Submission System 1.0 Backend

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...

Shield Spirit Original Article Submission System 1.0 SQL Injection Vulnerability in Frontend

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 suffers from a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain sensitive information from the database...

PT-2020-4300 · Teclib +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.2 Description: The issue is related to the incorrect neutralization of special elements used in SQL commands, which can allow a remote attacker to execute arbitrary SQL queries to the database in the target system b...

SQL Injection Vulnerability in PHP Version of Nettie CMS

OTCMS Nettie CMS is an article-based web content management system CMS. A SQL injection vulnerability exists in the PHP version of OTCMS, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-20800

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI...

SQL Injection Vulnerability in Linkworks of Quanta Technology Co.

Founded in 1998, Quanta Technology Co., Ltd. is a digital construction platform service provider with professional applications in the field of construction engineering as the core basic support, and value-added services such as industrial big data and industrial new finance. A SQL injection...