107 matches found
phpMyAdmin 3.5.x < 3.5.8.2 / 4.0.x < 4.0.4.2 Multiple Vulnerabilities (PMASA-2013-8 - PMASA-2013-15
According to its self-identified version number, the phpMyAdmin install hosted on the remote web server is 3.5.x earlier than 3.5.8.2 or 4.0.x earlier than 4.0.4.2. It is, therefore, affected by the following vulnerabilities : - Numerous input validation errors exist that could lead to cross-site...
DEBIAN-CVE-2013-5003
Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote authenticated users to execute arbitrary SQL commands via 1 the scale parameter to pmdpdf.php or 2 the pdfpagenumber parameter to schemaexport.php...
CVE-2013-5003
Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote authenticated users to execute arbitrary SQL commands via 1 the scale parameter to pmdpdf.php or 2 the pdfpagenumber parameter to schemaexport.php...
CVE-2013-5003
CVE-2013-5003 affects phpMyAdmin 3.5.x < 3.5.8.2 and 4.0.x
SQL injection vulnerabilities, producing a privilege escalation (control user).
PMASA-2013-15 Announcement-ID: PMASA-2013-15 Date: 2013-07-28 Updated: 2013-08-06 Summary SQL injection vulnerabilities, producing a privilege escalation control user. Description Due to a missing validation of parameters passed to schemaexport.php and pmdpdf.php, it was possible to inject SQL...
CVE-2012-5003
CVE-2012-5003 concerns nxapplet.jar in No Machine NX Web Companion 3.x and earlier. The update authenticity check is insufficient, allowing a user-assisted remote attacker to execute arbitrary code via a crafted (SiteUrl) or (RedirectUrl) parameter that points to a Trojan Horse client.zip update ...
CVE-2011-5003
CVE-2011-5003: Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) of Avid Media Composer 5.5.3 and earlier allows remote code execution via a long request to TCP port 4659 (MSF module notes it may run on 4660). Affected component: AvidPhoneticIndexer.exe; vulnerability ...
CVE-2011-5003
creationtimestamp| type| source ---|---|--- 2011-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18183 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/avidphoneticindexer.rb 2025-02-06 03:13:40+00:00|...
Avid Media Composer 5.5 - Avid Phonetic Indexer Buffer Overflow
This module exploits a stack buffer overflow in process AvidPhoneticIndexer.exe port 4659, which comes as part of the Avid Media Composer 5.5 Editing Suite. This daemon sometimes starts on a different port; if you start it standalone it will run on port 4660. Module Options msf use...
CVE-2010-5003
The CVE-2010-5003 entry concerns an SQL injection in the AutarTimonial component (com_autartimonial) version 1.0.8 for Joomla!. The vulnerability is triggered via the limit parameter in an autartimonial action to index.php, allowing remote attackers to execute arbitrary SQL commands. The affected...
Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions
No description provided by source. Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions Vendor: Microsoft Corp. Product web page: http://www.microsoft.com Affected version: 1.3.30601.30705 summary: Microsoft Source Code Analyzer for SQL Injection is a static code analysis too...
Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions
Exploit for windows platform in category local exploits Vendor: Microsoft Corp. Product web page: http://www.microsoft.com Affected version: 1.3.30601.30705 summary: Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection vulnerabilities in ASP...
Microsoft Source Code Analyzer for SQL Injection 1.3 - Improper Permissions
Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions Vendor: Microsoft Corp. Product web page: http://www.microsoft.com Affected version: 1.3.30601.30705 summary: Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection...
CVE-2007-5003
creationtimestamp| type| source ---|---|--- 2010-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16411 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/lgserverrxrlogin.rb 2025-02-06 03:13:38+00:00...
CVE-2009-5003
CVE-2009-5003 is an SQL injection in the e-soft24 Banner Exchange Script 1.0. The vulnerability is in click.php, exploitable via the targetid parameter to allow remote execution of arbitrary SQL commands. Multiple sources (NVD, CVE lists, PRION) corroborate this description. The reports do not pr...
CVE-2010-5003
creationtimestamp| type| source ---|---|--- 2010-07-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14249...
CA BrightStor ARCserve for Laptops & Desktops LGServer Buffer Overflow
$Id: lgserverrxrlogin.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class...
CVE-2009-5003
creationtimestamp| type| source ---|---|--- 2009-08-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9387...
CVE-2008-5003
CVE-2008-5003 describes an SQL injection in ndetail.php of Shahrood, exploitable remotely via the id parameter to execute arbitrary SQL. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network attack vector, low access complexity, and no authentication required; confidentiality, integr...