111 matches found
WordPress QueryWall Plugin <= 1.1.1 is vulnerable to SQL Injection
Software QueryWall Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2492 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID d408ec241600 Credits Chien Vuong Required privilege Administrator Published 29...
Debian: Security Advisory (DSA-2303-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2004-2492
Cross-site scripting XSS vulnerability in Groupmax World Wide Web GmaxWWW Desktop 5, 6, and Desktop for Jichitai 6, allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter...
SUSE CVE-2005-2492
The rawsendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service change hardware state or read from arbitrary memory via crafted input...
CVE-2022-2492
creationtimestamp| type| source ---|---|--- 2022-07-20 16:19:57+00:00| seen| https://t.me/cibsecurity/46639...
CVE-2022-2492 SourceCodester Library Management System index.php sql injection
A vulnerability was found in SourceCodester Library Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument RollNo with the input admin' AND SELECT 2625 FROM SELECTSLEEP5MdIL AND...
CVE-2022-2492 SourceCodester Library Management System index.php sql injection
A vulnerability was found in SourceCodester Library Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument RollNo with the input admin' AND SELECT 2625 FROM SELECTSLEEP5MdIL AND...
CVE-2022-2492
The connected documents confirm a SQL injection vulnerability in SourceCodester Library Management System 1.0, specifically via the RollNo parameter in /index.php. The input (e.g., admin' AND (SELECT 2625 FROM (SELECT(SLEEP(5)))MdIL) AND 'KXmq'='KXmq) can be injected to manipulate the query, enab...
SUSE: Security Advisory (SUSE-SU-2018:2492-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:2492-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-2492
If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907...
CVE-2020-2492
If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907...
CVE-2020-2492
CVE-2020-2492 affects QNAP QTS prior to 4.4.3.1421 (build 20200907). Multiple sources confirm a remote command injection vulnerability that could allow an attacker to execute arbitrary commands with network access and with high-impact implications (confidentiality, integrity, availability all pot...
CVE-2019-2492
CVE-2019-2492 relates to the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Affected are supported E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.8. The vulnerability is exploitable by an unauthenticated attacker with network access via HT...
CVE-2018-2492
CVE-2018-2492 affects SAP NetWeaver AS Java where the SAML 2.0 functionality does not sufficiently validate XML documents from an untrusted source. The issue is resolved by updating to versions 7.2, 7.30, 7.31, 7.40 or 7.50. The description notes the vulnerability and its remediation, but the pro...
CVE-2017-2492
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that triggers...
CVE-2017-2492
CVE-2017-2492 is an UXSS vulnerability in Apple’s JavaScriptCore affecting iOS <10.3, Safari <10.1, and tvOS
Oracle Linux 7 : xmlsec1 (ELSA-2017-2492)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2492 advisory. - CVE-2017-1000061 - CVE-2017-1000061 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...
Firebird - Relational Database CNCT Group Number Buffer Overflow Exploit
Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Firebird Relational Database CNCT Group Number Buffer Overflow',...