Damon Database Management System DBA Account Remote Buffer Overflow Vulnerability

Damon Database Management System is a database management system introduced by Damon, abbreviated as DM. The latest version of Damon Database Management System, version 7.1.5.145, suffers from a buffer overflow vulnerability, where an attacker logging in with DBA privileges can cause the service ...

CVE-2016-3562

Unspecified vulnerability in the RDBMS Security and SQLPlus components in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality via vectors related to DBA...

Oracle E-Business Suite Oracle Applications DBA Component Unauthorized Access Vulnerability

Oracle E-Business Suite E-Business Suite is Oracle's Oracle set of fully integrated global business management software. Oracle Applications DBA is one of the application database management component. An unauthorized access vulnerability exists in the AD Utilities subcomponent of the Oracle...

Oracle E-Business Suite Applications DBA Component Remote Information Disclosure Vulnerability (CNVD-2016-09786)

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software.Oracle Applications DBA is one of the application database administrator component. A remote information disclosure vulnerability exists in the AD Utilities subcomponent of the Oracl...

Oracle MySQL Remote Command Execution Vulnerability

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A remote command execution vulnerability exists in Oracle MySQL. The vulnerability allows a local user with low privileges...

ecshop 2.73 lib_transaction. php file to secondary SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

A secondary injection, insert type, can be directly read from the database administrator information Use of process: find a product to purchase, modify the color of the radio buttons value2','6', 'c4598c0015367d28cfcb267fffc750fd', '1 3', 'ECS000013', midloadfile'C:/wamp/www/ec/data/config.php',7...

DHTMLX Suite 3.0 SQL Injection / Cross Site Scripting

Title: ====== DHTMLX Suite v.3.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=507 VL-ID: ===== 507 Introduction: ============= To demonstrate the rich possibilities of DHTMLX controls and to show how they work...

Oracle Database Server XDB PITRIG TRUNCATE and DROP SQL Injection (CVE-2008-0339)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Hack attack:in a WEB App, hidden Backdoor-vulnerability warning-the black bar safety net

In many commercial programs,the programmer might, for some purposes, in the program left by the back door. We do not discuss the purpose of doing so is what, just talk about how in the program to hide an“ultimate back door.” First of all for everyone to see an example, last year I wrote an articl...

Hack attack: in a WEB application hidden Backdoor-vulnerability warning-the black bar safety net

In many commercial programs,the programmer might, for some purposes, in the program left by the back door. We do not discuss the purpose of doing so is what, just talk about how in the program to hide an“ultimate back door.” First of all for everyone to see an example, last year I wrote an articl...

session spoofing and password theft probe-vulnerability warning-the black bar safety net

session spoofing article first briefly about the General asp system of the authentication principle. In General, the backend administrator login page enter the account password, the program will take him to submit a user name and password to the database administrator table to find if there is th...

CVE-2006-1772

debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/databaseadminpass record, which...

Default credentials

debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/databaseadminpass record, which...

Paros: Default administrator password

Background Paros is an intercepting proxy between a web server and a client meant to be used for security assessments. It allows the user to watch and modify the HTTPS traffic. Description Andrew Christensen discovered that in older versions of Paros the database component HSQLDB is installed wit...

CVE-2005-1867

The CVE-2005-1867 entry affects Symantec Brightmail AntiSpam prior to version 6.0.2 , where a hard-coded database administrator password enables remote attackers to gain privileges. This is described with an admin-privilege escalation risk and a high base score (CVSS v2: 7.5, NETWORK, LOW access ...

ASI Oracle Security Alert: Oracle Home Environment Variable Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Oracle Home Environment Variable Buffer Overflow For additional details, the official advisories from Oracle Corporation can be downloaded from: http://otn.oracle.com/deploy/security/pdf/dbsmpalert.pdf Summary: By setting a long ORACLEHOME value more...