EML enterprise address book management system username parameter has SQL injection vulnerability

EML enterprise address book management system to the enterprise employees at any time, any place to provide enterprise address book information, can be in the cell phone real-time view of the staff contact information, dialing the phone and so on. The EML enterprise address book management system...

SQL Injection Vulnerability in J_username Parameter of Spotlight Technology Air Quality Online Monitoring System

The Air Quality Online Monitoring System is a system produced by Spotlight Technology that can realize online automatic monitoring of regional air quality. A SQL injection vulnerability exists in the jusername parameter of Spotlight Technology's Air Quality Online Monitoring System, which allows...

PT-2017-2845

Name of the Vulnerable Software and Affected Versions Teltonika RUT9XX versions 00.03.265 and earlier Description The issue is related to inadequate access control in the authentication request, allowing a remote attacker to execute arbitrary commands with root privileges by using shell...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System yaoqinguser.php

Shield Spirit public number promotion system is a public number promotion system for individuals and businesses. Shield Spirit public number promotion system yaoqinguser.php SQL injection vulnerability, due to the lack of 'username' parameter filtering, allowing attackers to exploit the...

Cell Phone Remote Lighting Monitoring System SQL Injection Vulnerability in txtUsername Parameter

Mobile Remote Lighting Monitoring System is a lighting monitoring system from China Electronic Technology Group Corporation. A SQL injection vulnerability exists in the Mobile Remote Lighting Monitoring System. The lack of filtering of the 'txtUsername' parameter allows an attacker to exploit the...

CVE-2017-7410

Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in WebsiteBaker 2.10.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 username, 2 displayname parameter...

Moxa AWK-3131A 1.4 1.7 - Username OS Command Injection

Moxa AWK-3131A 1.4 1.7 - Username OS Command Injection !/usr/bin/env python2 import telnetlib import re import random import string Split string into chunks, of which each is /var/a' - 1 completed = temp = re.split'\n', script for content in temp: if lencontent != 0: for s in re.split' ', content...

Reflective cross-site scripting vulnerability in multiple parameters of DuoDuo Rebate System V8.3_UTF8 official version

DuoDuo rebate system is for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuoRebate.com system V8.3UTF8 official version February 10, 2017 There is a reflective cross-site scripting vulnerability. Due to the code parameter , ddusername...

CVE-2016-7788

SQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2016-7788: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

GOsa Cross-Site Scripting Vulnerability

GOsa is a set of LDAP front-end tools for managing users. A cross-site scripting vulnerability exists in the 'displayLogin' function of the html/index.php file in GOsa. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of a username...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System reg.php Page

Shield Spirit Public Promotion System is a product that is mainly applied to public promotion alliance. A SQL injection vulnerability exists in the username parameter of the Shield Spirit public number promotion system \php\reg.php page. An attacker can exploit the vulnerability to obtain sensiti...

SQL Injection Vulnerability in Shenzhen Siquan CRM System

Ltd. is engaged in OA, CRM, ERP, HRM, enterprise mailbox system consulting and services. A SQL injection vulnerability exists in Shenzhen SiQuan CRM system. The lack of filtering of the 'username' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the...

VMPanel Cross-Site Scripting Vulnerability

VMPanel is a website based on the VMware Esx/Esxi control panel and WHMCS plug-in. A cross-site scripting vulnerability exists in the username parameter of the VMPanel login page. As the program fails to adequately filter user-submitted input. An attacker could exploit this vulnerability to steal...

Multiple SQL Injection Vulnerabilities in ZZCMS 7.2

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the username parameter on the /reg/userregcheckemail.php page, the bigclass parameter on the zt/zs.php page, and the pagesize parameter on the /zh/zh.php page. An attacker can exploit the vulnerabilities to obtain...

Exponent CMS 'username' Parameter SQL Injection Vulnerability

Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS...

SQL Injection Vulnerability in fangmail Mail System

FangMail email system adopts distributed system architecture and built-in fourth-generation anti-spam gateway based on cloud technology. A SQL injection vulnerability exists in fangmail mail system. The lack of filtering of the 'username' parameter allows attackers to exploit the vulnerability to...

CVE-2016-4966

The diagnosiscontrol.php page in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter...

Design/Logic Flaw

The diagnosiscontrol.php page in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter...

SQL Injection Vulnerability in the Parameter txtUsername in the Login.aspx Page of Penta Software Education Management System

Pangda software education management system is .net development for vocational education WEB teaching management system. There is a SQL injection vulnerability in this product, the vulnerability URL is: http://target/NewPage/Login.aspx The vulnerability parameter is txtUsername and the type is PO...