CVE-2006-5351

Oracle Application Express (APEX/HTMLDB) prior to 2.2.1 contains multiple documented issues (APEX01–APEX35) including SQL injection in WWV_FLOW_UTILITIES.gen_popup_list and XSS via NOTIFICATION_MSG and WWV_FLOW_ITEM_HELP. CVEs CVE-2006-7138, CVE-2006-7158, and CVE-2006-5599 describe these vectors...

CVE-2006-5264: Undefined Security Weakness

Cross-site scripting XSS vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary web script or HTML via the db parameter...

phpquiz.txt

phpQuiz sensitive file install.php without authentification + Files containing interesting info passwords for sql db By : sn0oPy Risk : verry high Site : http://phpquiz.com/ Dork : intitle:"phpQuiz" | " Développé par PhpQuiz v.1.0 " | "© PhpQuiz" | inurl:"PhpQuiz" exploit :...

CVE-2006-4743: Undefined Security Weakness

WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for 1 404.php, 2 akismet.php, 3 archive.php, 4 archives.php, 5 attachment.php, 6 blogger.php, 7 comments.php, 8 comments-popup.php, 9 dotclear.php, 10 footer.php, 11 functions.php, 12...

CVE-2006-4628

Cross-site scripting XSS vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments...

CVE-2006-4628

Cross-site scripting XSS vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments...

CVE-2006-4628

The CVE-2006-4628 entry documents a Cross-site scripting (XSS) vulnerability in VCD-db prior to version 0.983. The flaw allows remote attackers to inject arbitrary web script or HTML when handling comments. The exact vectors and affected components are not detailed beyond the comments handling as...

CVE-2006-4628: Undefined Security Weakness

Cross-site scripting XSS vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments...

SAP DB / MaxDB WebDBM Client Database Name Remote Overflow

The remote host is running SAP DB or MaxDB, a SAP-certified open- source database supporting OLTP and OLAP. According to its version, the Web DBM component of MaxDB on the remote host reportedly contains a buffer overflow that can be triggered by an HTTP request containing a long database name. A...

[SA21781] VCD-db Comments Script Insertion Vulnerability

---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available:...

CVE-2006-4305

Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client...

CVE-2006-4305

Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client...

CVE-2006-4305

Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client...

CVE-2006-4305

CVE-2006-4305 describes a buffer overflow in SAP DB / MaxDB WebDBM when processing an overly long database name via WebDBM client connections. The initial entry states a remote code execution risk with MaxDB/WebDBM before 7.6.00.30. Connected sources corroborate details and show practical context...

SAP-DB / MaxDB database WebDBM buffer overflow

Buffer overflow on oversized database name...

CVE-2006-4305: Undefined Security Weakness

Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client...

SYMSA-2006-009

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2006-09 Advisory Title: SAP-DB/MaxDB WebDBM remote buffer overflow Author: Oliver Karow / [email protected] Release Date: 29-08-2006...

CVE-2006-4425

Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP code via the CCFGPKGPATHINCL parameter in coinincludes scripts including 1 api.php, 2 common.php, 3 core.php, 4 custom.php, 5 db.php, 6 redirect.php or 7 sessionset.php. NOTE: the...

wordpressTraverse.txt

Hi all, Software: WP-DB Backup Plugin for Wordpress Homepage: http://www.skippy.net/blog/category/wordpress/plugins/wp-db-backup/ Description: WP-DB Backup is vulnerable to directory traversal attack. You must have administrator rights in the wordpress blog to exploit this vulnerability. PoC:...

CVE-2006-4208

Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. dot dot in the backup parameter to edit.php...