CVE-2009-3994

CVE-2009-3994 affects DevIL 1.7.8, where a stack-based buffer overflow in GetUID in src-IL/src/il_dicom.c can be triggered by a crafted DICOM file to crash the application or permit arbitrary code execution. OpenSUSE openSUSE-SU-2024:10314-1 and SUSE CVE pages reference DevIL-devel-1.7.8-5.7 as f...

Team SHATTER Security Advisory: Oracle Database Multiple SQL Injection vulnerabilities in LTADM

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database Multiple SQL Injection vulnerabilities in LTADM November 12, 2008 Risk Level: Medium Affected versions: Oracle Database Server versions 9iR2, 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes Authentication...

CVE-2008-3994

CVE-2008-3994 affects Oracle Database: Workspace Manager component (LTADM) in versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6. The root cause is an SQL injection vulnerability in LTADM (WP/WMSYS owner) that can be triggered by remote authenticated users, potentially compromising con...

CVE-2006-3994

XMB has a SQL injection vulnerability CVE-2006-3994 in the u2u_send_recp function of u2u.inc.php (v1.9.6 Alpha and earlier). The u2uid parameter to u2u.php, which is read directly from $_POST, can be used to execute arbitrary SQL commands, bypassing the protection scheme. Affected software: XMB (...

CVE-2006-3994

SQL injection vulnerability in the u2usendrecp function in u2u.inc.php in XMB aka extreme message board 1.9.6 Alpha and earlier allows remote attackers to execute arbitrary SQL commands via the u2uid parameter to u2u.php, which is directly accessed from $POST and bypasses the protection scheme...