5722 matches found
SAP DB / MaxDB Cons Program Arbitrary Command Execution
Binary data 4337.prm...
DEBIAN-CVE-2008-0193
Cross-site scripting XSS vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows remote attackers to inject arbitrary web script or HTML via the backup parameter in a wp-db-backup.php action to wp-admin/edit.php...
CVE-2008-0193
Cross-site scripting XSS vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows remote attackers to inject arbitrary web script or HTML via the backup parameter in a wp-db-backup.php action to wp-admin/edit.php...
CVE-2008-0193
Cross-site scripting XSS vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows remote attackers to inject arbitrary web script or HTML via the backup parameter in a wp-db-backup.php action to wp-admin/edit.php...
Oracle Database 10 g - XML DB xdb.xdb_pitrig_pkg Package PITRIG_TRUNCATE Function Overflow
Oracle Database 10 g - XML DB xdb.xdbpitrigpkg Package PITRIGTRUNCATE Function Overflow source: https://www.securityfocus.com/bid/27229/info Oracle has released its critical patch update for January 2008. The advisory addresses 26 vulnerabilities affecting Oracle Database, Oracle Application...
CVE-2008-0194: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete arbitrary files, and cause a denial of service via a .. dot dot in the backup parameter in a wp-db-backup.php action to wp-admin/edit.php. NOTE: this might ...
CVE-2008-0193
CVE-2008-0193 describes a cross-site scripting (XSS) vulnerability in WordPress versions 2.0.11 and earlier, with possible reach into 2.1.x through 2.3.x. The issue arises in the file wp-db-backup.php where an attacker can inject arbitrary web script or HTML via the backup parameter when issuing ...
CVE-2008-0193: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows remote attackers to inject arbitrary web script or HTML via the backup parameter in a wp-db-backup.php action to wp-admin/edit.php...
CVE-2008-0193
Cross-site scripting XSS vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows remote attackers to inject arbitrary web script or HTML via the backup parameter in a wp-db-backup.php action to wp-admin/edit.php...
CVE-2008-0193
Cross-site scripting XSS vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows remote attackers to inject arbitrary web script or HTML via the backup parameter in a wp-db-backup.php action to wp-admin/edit.php...
WordPress <= 2.0.11 - XSS
Because of this vulnerability in wp-db-backup.php, the attackers can inject arbitrary web script or HTML via the "backup" parameter in a wp-db-backup.php action to wp-admin/edit.php. Solution Update the WordPress...
Oracle DB SQL Injection via SYS.DBMS_METADATA.OPEN
This module will escalate a Oracle DB user to DBA by exploiting an sql injection bug in the SYS.DBMSMETADATA.OPEN package/function. Module Options msf use auxiliary/sqli/oracle/dbms/metadataopen msf undefinedmetadataopen show actions ...actions... msf undefinedmetadataopen set ACTION msf...
Eurologon CMS Db credentials disclosure / files download
--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
Eurologon CMS - files.php Arbitrary File Download
Eurologon CMS - files.php Arbitrary File Download --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
Re: PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure
sorry, i've made a mistake! only the versions = 1.0.0 are veulnerable!...
PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure
--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
Microsoft Jet Engine - .MDB File Parsing Stack Overflow
Microsoft Jet Engine - .MDB File Parsing Stack Overflow Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: A remote code execute vulnerability exists in Microsoft Jet Engine. A remote attacker who successfully...
DEBIAN-CVE-2007-5977
Cross-site scripting XSS vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than...
docusafe-sql.txt
DocuSafe "Search" SQL Injection Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://gartha.net Google Search: intitle:Corporate Contact System insert your command in the section "search" example: 'having 1=1-- Result: MicrosoftODB...
CVE-2007-5976: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to execute arbitrary SQL commands via the db parameter...