CVE-2008-4750: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...

VImpX.ocx ActiveX控件多个文件破坏漏洞

BUGTRAQ ID: 31907 VImpX ActiveX控件允许跨表格或ODBC数据源将数据导入到Oracle、SQL Server或ODBC数据库中。 VImpX.ocx ActiveX控件（VImpX.ocx，CLSID...

dbsoftware-multi.txt

----------------------------------------------------------------------------- db Software Laboratory VImpX VImpX.ocx Multiple vulnerabilities url: http://www.dbsoftlab.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net Info: File: VImpX.ocx v. 4.8.8.0 CLSID:...

Oracle DB SQL Injection via SYS.LT.MERGEWORKSPACE

This module exploits a sql injection flaw in the MERGEWORKSPACE procedure of the PL/SQL package SYS.LT. Any user with execute privilege on the vulnerable package can exploit this vulnerability. Module Options msf use auxiliary/sqli/oracle/lt/mergeworkspace msf undefinedmergeworkspace show actions...

CREATE ANY DIRECTORY to SYSDBA

I have found a serious privilege escalation in the Oracle DB that raises a lower privileged user with CREATE ANY DIRECTORY to that of SYSDBA by directly overwriting the hidden binary password file with a known binary password file via UTLDIR. Full discussion of how to defend and respond to this a...

apm-sql.txt

Author : Hakxer Home : Www.educ-up.com Type Gap : Sql injection --MSSQL Injection-- script : Absolute Poll Manager XE see script http://www.xigla.com/absolutepm/demo.htm Greetz : Allah , Egyptian x Hacker , Soufiane , Sinaritx , SQLinj4ct0r , Stealth , Kof2002 TM : EgY Coders POC...

CVE-2008-6189

creationtimestamp| type| source ---|---|--- 2008-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6707...

CVE-2008-4511: Undefined Security Weakness

Todd Woolums ASP News Management, possibly 2.21, stores db/news.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2008-6097

creationtimestamp| type| source ---|---|--- 2008-10-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32450...

Gentoo Security Advisory GLSA 200605-13 (MySQL)

The remote host is missing updates announced in advisory GLSA 200605-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200409-02 (MySQL)

The remote host is missing updates announced in advisory GLSA 200409-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200407-22 (dev-db/phpmyadmin)

The remote host is missing updates announced in advisory GLSA 200407-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

phpAdultSite CMS flaws

Original article: http://www.davidsopas.com/2008/09/phpadult-cms-exploit/ phpAdultSite CMS is a PHP-based content management system for a adult pay site that fully supports MySQL. The code, layout, graphics of phpAdultSite are consistent through every single page of your site. It costs between $4...

Code injection

Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when registerglobals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file...

CVE-2008-3763

Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when registerglobals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file...

EUVD-2008-3749

Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when registerglobals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file...

CVE-2008-4310

creationtimestamp| type| source ---|---|--- 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32222...

Atmail Remote Authentication Bypass, Full DB Compromise

@Mail PHP Version 5.41 patch Release http://atmail.com/demo/atmailphpdemo.tgz The default install of Atmail 5.41 creates the following file in the atmail/ directory: build-plesk-upgrade.php If that file is called via http, such as: http://example.com/atmail/build-plesk-upgrade.php it will execute...

CVE-2008-3383

creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6111...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to 1 the db parameter in the "Creating a Database" functionality dbcreate.php, and 2 the convcharset and collationconnection parameters related...