GLSA-200603-13 : PEAR-Auth: Potential authentication bypass

The remote host is affected by the vulnerability described in GLSA-200603-13 PEAR-Auth: Potential authentication bypass Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact : A remote attacker could possibly exploit this vulnerabili...

DEBIAN-CVE-2006-0806

Multiple cross-site scripting XSS vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via 1 the nextpage parameter in adodb-pager.inc.php and 2 other unspecified vectors related to PHPSELF...

PT-2006-1803 · Dotproject · Dotproject

Name of the Vulnerable Software and Affected Versions: dotProject versions 2.0.1 and earlier Description: The issue allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain PHP scripts in the db directory, which reveal the path in an error...

CVE-2006-0754: Undefined Security Weakness

dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain PHP scripts in the db directory, which reveal the path in an error message. NOTE: the vendor disputes this issue, saying that it could only occur if the...

Oracle Database XML Database SQL Injection vulnerability

Overview Oracle Database XML Database XML DB is vulnerable to SQL injection, possibly allowing a remote attacker to execute arbitrary SQL commands on a vulnerable Oracle installation. Description According to Oracle:Oracle XML DB is a feature of the Oracle Database. It provides a high-performance...

CVE-2005-4241

Cross-site scripting XSS vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTML via the batch parameter...

CVE-2005-4240

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter...

CVE-2005-4241

The CVE-2005-4241 issue affects VCD-db 0.98 and earlier, with a Cross-site Scripting (XSS) vulnerability on the category page exploited via the batch parameter. Remote attackers could inject arbitrary script/HTML. This entry is supported by multiple sources noting XSS in VCD-db and the affected v...

CVE-2005-4241

Cross-site scripting XSS vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTML via the batch parameter...

CVE-2005-4240

Vulnerability details (CVE-2005-4240): Affected software is VCD-db 0.98 and earlier. The issue is an SQL injection in search.php via the by parameter, allowing remote attackers to execute arbitrary SQL commands. Impact is stated as partial confidentiality/integrity/availability (per CVSS), with n...

CVE-2005-4240

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter...

CVE-2005-4241: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTML via the batch parameter...

CVE-2005-4240: Undefined Security Weakness

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter...

VCD-db vuln.

VCD-db vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/vcd-db-vuln.html vendor: http://vcddb.konni.com/ affected version:V.0.98 and prior Product Description: VCD-db is a Free web based software that lets you manage your DVD/VCD/CDs collectio...

VCD-db 0.9x Search Module - 'batch' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15840/info VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

VCD-db 0.9x Search Module - batch Cross-Site Scripting

VCD-db 0.9x Search Module - batch Cross-Site Scripting source: https://www.securityfocus.com/bid/15840/info VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these...

Replace the small bamboo of the NBSI2: the Opendatasource And Openrowset-vulnerability warning-the black bar safety net

Currently on the market of SQL Injection tools a lot, the most respected is the NBSI2. SQL Injection method on the Internet is everywhere, everyone serious to learn it will soon become the script of the invasion“master”it. But whether it is tools, or numerous methods, to guess the SQL data when t...

CVE-2005-3696

SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action view.php to index.php...

CVE-2005-3696

SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action view.php to index.php...

CVE-2005-3696

CVE-2005-3696 affects Arki-DB 1.0 and 2.0. A SQL injection exists in the catid parameter used in the view action (view.php) passed to index.php, enabling remote attackers to manipulate the database. The NVD notes a base score of 7.5 (HIGH) with network access and low complexity. Affected versions...