Fedora 24 : php-adodb (2016-fed6f8c57d)

Security fix for CVE-2016-4855 1373374 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...

Fedora 23 : php-adodb (2016-7d6ca385a4)

Security fix for CVE-2016-4855 1373374 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...

[SECURITY] Fedora 23 Update: php-adodb-5.15-10.fc23

ADOdb is an object oriented library written in PHP that abstracts database operations for portability. It is modelled on Microsoft's ADO, but has many improvements that make it unique eg. pivot tables, Active Record support, generating HTML for paging recordsets with next and previous links, cach...

[SECURITY] Fedora 24 Update: php-adodb-5.15-10.fc24

ADOdb is an object oriented library written in PHP that abstracts database operations for portability. It is modelled on Microsoft's ADO, but has many improvements that make it unique eg. pivot tables, Active Record support, generating HTML for paging recordsets with next and previous links, cach...

Fedora Update for php-adodb FEDORA-2016-fed6f8c57d

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-620-1 : libphp-adodb security update

It was discovered that there was a SQL injection vulnerability in libphp-adodb, PHP database abstraction layer library. For Debian 7 'Wheezy', this issue has been fixed in libphp-adodb version 5.15-1+deb7u1. We recommend that you upgrade your libphp-adodb packages. NOTE: Tenable Network Security...

[SECURITY] [DLA 620-1] libphp-adodb security update

Package : libphp-adodb Version : 5.15-1+deb7u1 Debian Bugs : 837211, 837418 It was discovered that there was a SQL injection vulnerability in libphp-adodb, PHP database abstraction layer library. For Debian 7 "Wheezy", this issue has been fixed in libphp-adodb version 5.15-1+deb7u1. We recommend...

DLA-620-1 libphp-adodb - security update

Bulletin has no description...

[SECURITY] Fedora 25 Update: php-adodb-5.15-10.fc25

ADOdb is an object oriented library written in PHP that abstracts database operations for portability. It is modelled on Microsoft's ADO, but has many improvements that make it unique eg. pivot tables, Active Record support, generating HTML for paging recordsets with next and previous links, cach...

JVN#48237713: ADOdb vulnerable to cross-site scripting

ADOdb is a database abstraction layer for PHP. The library's test script test.php contains a cross-site scripting CWE-79 vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information...

XSS vulnerability in old test script

JPCERT Coordination Center JPCERT/CC reported the following vulnerability in ADOdb. As a workaround until hotfix is released, we recommend all users to remove the whole ./tests directory; it is only used for development purposes and is not necessary for normal ADOdb operations. --- Report...

ADOdb 4.71 - Cross Site Scripting

ADOdb 4.71 - Cross Site Scripting ADOdb Cross Site Scripting Vendor: John Lim Product: ADOdb Version: currpage = $SESSION$currpage; The above code is taken from adodb-pager.inc.php @ lines 72-77 and ultimately set's the $this-currpage variable to unsanitized user supplied input. Later on this...

ADOdb < 4.71 - Cross Site Scripting

ADOdb Cross Site Scripting Vendor: John Lim Product: ADOdb Version: currpage = $SESSION$currpage; The above code is taken from adodb-pager.inc.php @ lines 72-77 and ultimately set's the $this-currpage variable to unsanitized user supplied input. Later on this variable is used when drawing the lin...

Debian Security Advisory DSA 3120-1 (mantis - security update)

Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. OpenVAS Vulnerability Test $Id: deb3120.nasl 6609 2017-07-07 12:05:59Z...

Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow

No description provided by source. Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow Vulnerability tested against: Microsoft Windows 2k3 r2 sp2 Oracle Hyperion Performance Management and BI v11.1.2.1.0 download url of the Oracle Hyperion suite...

ADODB < 4.70 (PhpOpenChat 3.0.x) Server.php SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PhpOpenChat 3.0.x ADODB Server.php \sql\ SQL injection\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo dork: Welcome to your PHPOpenChat-Installation!\r\n\r\n; if $argc4...

ADODB < 4.70 (tmssql.php) Denial of Service Vulnerability

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo ADODB tmssql.php Denial of service\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; if $argc4 echo Usage: php .$argv0. host path redo OPTIONS\r\n; echo host: target server...

In-Portal In-Link 2.3.4 ADODB_DIR.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19824/info In-portal In-link is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

In-link <= 2.3.4 (ADODB_DIR) Remote File Include Vulnerabilities

No description provided by source. ================================================================= in-link =2.3.4 adodb-postgres7.inc.php Remote File Inclusion Exploit ================================================================ Critical Level : Dangerous By Saudi Hackrz...

Free PHP photo gallery script Remote Command Execution Vulnerability

Exploit Title: Free PHP photo gallery script Remote Command Execution Vulnerability Date: 2010/07/21 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpgalleryscript.org download Script: http://phpweby.com/downloads/gallery Tested o...