8435 matches found
Aicheng Technology website building system has SQL injection vulnerability
Chengdu Aicheng Technology Co., Ltd. is a collection of website planning, web design, website construction, network promotion seo keyword optimization, network integrated marketing and other business enterprises. There is a SQL injection vulnerability in the Aicheng Technology website builder...
NUUO CMS SQL Injection Vulnerability
NUUO CMS is a set of centralized software management platform from NUUO. The platform is used to centrally manage devices such as NVRs hard disk recorders and IP cameras, and provides functions such as user management and alarm management. A SQL injection vulnerability exists in NUUO CMS 3.3 and...
Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26788)
BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'updateblock' function of the Dynamiccontenttags.php file in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this...
CVE-2018-19468
HuCart 5.7.4 has SQL injection in getip in system/class/helperclass.php via the X-Forwarded-For HTTP header to the user/index.php?load=login&act=actlogin URI...
BSEN Ordering software SQL Injection Vulnerability
BSEN Ordering software is a procurement management system. A SQL injection vulnerability exists in BSEN Ordering software version 1.0. A remote attacker can use the vulnerability to view, add, modify, or delete information in the back-end database with the help of the...
SaltOS SQL Injection Vulnerability
SaltOS is a suite of enterprise management solutions from the SaltOS program. The product integrates features such as CRM Customer Relationship Management and ERP Enterprise Resource Planning. A SQL injection vulnerability exists in SaltOS version 3.1 r8126, which can be exploited by remote...
SeaCMS SQL Injection Vulnerability (CNVD-2019-08331)
SeaCMS Ocean CMS is a professional open source free PHP film and television system. SeaCMS 6.6.4 suffers from a SQL injection vulnerability, which can be exploited by attackers via the adminmakehtml.php topic parameter...
SQL Injection Vulnerability in Boqiang Network Technology Company's Website Building System
Boqiang network technology company is engaged in enterprise, business website design, website construction, e-commerce, graphic design, wap website construction and software development and other production and application in one of the Internet company. A SQL injection vulnerability exists in...
SQL Injection Vulnerability in the Website Building System of Shanghai Qiu Chuang Technology Co.
Ltd. is a professional company focusing on providing customers with high-end website planning, website construction, web design, brand network marketing and related Internet-based application services. A SQL injection vulnerability exists in the website building system of Shanghai Seek Creative...
Microsoft Dynamics 365 Remote Code Execution Vulnerability
Dynamics 365 is a product family of enterprise resource planning and customer relationship management applications released in July 2016 by Microsoft. A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises version 8. The vulnerability stems from the Dynamics server...
vulhub
It is an offensive tool for Web Application. The repository contains a collection of pre-built vulnerable docker environments, including a web application vulnerable to various attacks. The tool is designed to help developers and security researchers test and demonstrate the effectiveness of web...
MetInfo pa***.php file has sql injection vulnerability
MetInfo is a content management system developed using PHP and Mysql. A sql injection vulnerability exists in the MetInfo pa.php file, which can be exploited by an attacker to obtain sensitive information from the database...
SQL Injection Vulnerability in QuarkCall All-Media Call Center Platform of Beijing Topmin Information Technology Co.
QuarkCall all-media call center integrates Topmind call center and unified communications products and services, aiming to help enterprises optimize customer experience, improve satisfaction and loyalty; optimize workflow and improve work efficiency. There is a SQL injection vulnerability in the...
Free version of TouchNet Universal Mall website builder system suffers from SQL injection vulnerability
TouchNet universal mall station-building system is a set of universal station-building system developed by Tianjin TouchNet Technology Co. The free version of TouchNet Universal Mall Station Building System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...
Cisco Integrated Management Controller Supervisor SQL Injection Vulnerability
Cisco Integrated Management Controller IMC Supervisor is a set of tools used by Cisco to manage UCS Unified Computing System, which supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down, and restarting the server. A SQL injection vulnerability exists in the web...
SQL Injection Vulnerability in HDCMS v2.0 groupLists Function
HDCMS is a content management system software package developed in PHP+Mysql. It provides customers with powerful and complete functionality to accomplish rapid website development. HDCMS v2.0 version groupLists function has a SQL injection vulnerability, remote attackers can use this vulnerabili...
SQL Injection Vulnerability in Nanjing Yunhuatong Network Technology Website Building System
Nanjing Yunhuatong Network Technology Station Building System is an enterprise station building system developed by Nanjing Yunhuatong Network Technology Co. There is a SQL injection vulnerability in Nanjing Yunhuatong Network Technology website building system, which can be exploited by attacker...
Description of the security update for the elevation of privilege vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: November 13, 2018
Description of the security update for the elevation of privilege vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: November 13, 2018 Summary An elevation of privilege exists in Windows OLE Structured Storage marshaler. An attacker who successfully exploits the...
S-CMS Hospital Building System In***.php file suffers from SQL injection vulnerability
S-CMS hospital station building system is developed by asp+access/mssql, easy to operate, convenient, support PC+mobile+WeChat. There is a SQL injection vulnerability in the In.php file of S-CMS Hospital Building System. Attackers can use the vulnerability to obtain sensitive information in the...