CVE-2007-5679

SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page buildmediacontent.php. NOTE: it was later reported that 0.7.4 is also affected...

CVE-2007-5679

The CVE-2007-5679 entry describes a SQL injection in DeeEmm.com DM CMS, affecting version 0.7.0.Beta (via index.php’s media page build_media_content.php using the id parameter) and later reported to affect 0.7.4 as well. This allows remote attackers to execute arbitrary SQL commands. The connecte...

CVE-2007-5679

SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page buildmediacontent.php. NOTE: it was later reported that 0.7.4 is also affected...

DM CMS Index.PHP SQL注入漏洞

DM CMS是一款基于PHP的WEB应用程序。 DM CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'index.php'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 DMCMS 0.7 目前没有详细解决方案提供： http://sourceforge.net/projects/dmcms/ http://www.example.com/index.php?page=media&id=SQL INJECTION CODE GOES HE...

Hitachi JP1/NETM/DM Manager产品未明SQL注入漏洞

Hitachi JP1/NETM/DM Manager对输入数据缺少充分过滤检查，可导致SQL注入攻击获得敏感信息。 发送记性请求给JP1/NETM/DM使用的相关数据库，可导致执行任意SQL命令和破坏数据库。 目前没有详细漏洞细节提供。 Hitachi NETM/DM 02-03-/F1 Hitachi NETM/DM 02-00 Hitachi JP1/NETM/DM Manager Embedded RDB Edition 07-53-09 Hitachi JP1/NETM/DM Manager Embedded RDB Edition 07-00 Hitachi...

CVE-2007-3793

SQL injection vulnerability in Job Management Partner 1/NETM/DM JP1/NETM/DM Manager on Windows before 20070413 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-3793

JP1/NETM/DM Manager for Windows is affected by a SQL injection vulnerability (CVE-2007-3793) described in the JVN entry: arbitrary SQL commands could be executed or the database could be corrupted when handling malformed requests. The vulnerability concerns the JP1/NETM/DM Manager’s interaction w...

CVE-2007-3793

SQL injection vulnerability in Job Management Partner 1/NETM/DM JP1/NETM/DM Manager on Windows before 20070413 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:086)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to Linux kernel 2.6.16.5, the kernel does not properly handle uncanonical return addresses on Intel EM64T CPUs which causes the kernel exception handler to run on the user stack with the wrong GS...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0132 Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the third regular update. This update has been rated as having moderate security impact by the Red Hat Security...

RHEL 4 : Updated kernel packages available for Red Hat Enterprise Linux 4 Update 3 (Moderate) (RHSA-2006:0132)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2006:0132 advisory. The Linux kernel handles the basic functions of the operating system. This is the third regular kernel update to Red Hat Enterprise Linux 4. New...

Moderate: Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 3

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the third regular update. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Linux kernel handles the basic...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:040)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The udpv6getport function in udp.c, when running IPv6, allows local users to cause a Denial of Service infinite loop and crash CVE-2005-2973. The mqopen system call in certain situations can decrement a counter...

Multiple Computer Associates (CA) products vulnerabilities

DM Primer and CA Unicenter buffer overflows, multiple DM Deployment DoS conditions. iGateway buffer overflow. CA Message Queuing DoS conditions...

Ubuntu 4.10 / 5.04 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-244-1)

Doug Chapman discovered a flaw in the reference counting in the sysmqopen function. By calling this function in a special way, a local attacker could exploit this to cause a kernel crash. CVE-2005-3356 Karl Janmar discovered that the /proc file system module used signed data types in a wrong way....

Design/Logic Flaw

The DM Primer in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA...

Design/Logic Flaw

The DM Primer dmprimer.exe in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2...

[Full-disclosure] CAID 33756 - DM Deployment Common Component Vulnerabilities

Title: CAID 33756 - DM Deployment Common Component Vulnerabilities CA Vulnerability ID: 33756 Discovery Date: 2005-12-20 CA Advisory Date: 2006-01-17 Discovered By: Cengiz Aykanat CA internal audit, and KarmaatDesignFolksdotcomdotau. Impact: Remote attacker can cause a denial of service condition...

CA DM Deployment Common Component Multiple DoS

The remote version of DMPrimer service CA DM Deployment Common Component is vulnerable to multiple Denial of Service attacks. An attacker can crash or may cause a high CPU utilization by sending a specially crafted UDP packets. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

[Full-disclosure] DM Primer error handling weakness & an old CAM BO revisited

Apologies for the poor grammer and formatting... DM Primer is a shared service related to CA's Unicenter Remote Control. It is used in Enterprise environments to deploy URC6 from the URC v6.x Administration server. Dmprimer.exe listens on a client device for instructions from the server in a...