Oracle Reports Developer Version Release 9i to 10gr2 Database Disclosure

An undocumented PARSEQUERY function in Oracle Forms and Reports allows dumping database username and passwords unauthenticated. The patch / workaround just appears to obfuscate the issue but not actually address it. Affected systems include versions 9iAS, 9iDS, 10G DS and AS, and 10G AS...

Oracle Forms And Reports Database Disclosure

PARSEQUERY http://docs.oracle.com/cd/E1676401/bi.1111/b32121/pbrcla007.htmi640592 Description Use PARSEQUERY to parse an rwservlet query and display the constructed Reports Server command line. Syntax http://yourwebserver/reports/rwservlet/parsequery?server=servername&authid=username/password...

CVE-2012-0263

Affected products: op5 Monitor and op5 Appliance (before 5.5.1). Vulnerability description (as stated): remote authenticated users can obtain sensitive information (e.g., database and user credentials) via error messages triggered by (1) a malformed hoststatustypes parameter to status/service/all...

Glossword 1.8.12 XSS / CSRF / Shell Upload / Database Disclosure

Glossword version 1.8.12 suffers from database backup disclosure, cross site request forgery, cross site scripting, and remote shell upload vulnerabilities. =================================================== Vulnerable Software: Glossword 1.8.12 Tested version: Glossword 1.8.12 Download:...

Glossword 1.8.12 XSS / CSRF / Shell Upload / Database Disclosure

=================================================== Vulnerable Software: Glossword 1.8.12 Tested version: Glossword 1.8.12 Download: http://sourceforge.net/projects/glossword/files/glossword/1.8.12/ Vulns: XSS && Database Backup Disclosure && CSRF && Shell upload. Dork: Powered by Glossword 1.8.1...

Baar3 Database Disclosure Exploit

Exploit for php platform in category web applications !/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS,...

phpFaber CMS Multiple Vulnerabilities

phpFaber CMS Version: 2.4.0 CSRF Change Administrator Settings, Database Disclosure, Full Path Disclosure 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by...

Cims empdata.mdb Database Disclosure Exploit

Exploit for php platform in category web applications !/usr/bin/perl -w Title : Cims empdata.mdb Database Disclosure Exploit Facebook Page: http://www.facebook.com/Algerian.Cyber.Army E-mail: islambabiaathotmail.com Category:: WebApps Security Risk : High Vendor: http://www.simwebsol.com Download...

School Management System 1.0 Password / Backup Disclosure

Exploit Title: School Management System v 1.0 Remote Create SQL & Files Backup Date: 08/08/2012 Author: L0n3ly-H34rT Homepage: http://se3c.tk/ Contact: [email protected] Software Link: http://nigeriasocialforum.org/DSM1.0.zip Tested on: Linux/Windows P.O.C : 1- If you run this file in brows...

gComm - Simple Guestbook 0.1 <= Database Backup Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: gComm - Simple Guestbook 0.1 = Database Backup Disclosure Vulnerability Date: 18/7/2012 Author: GoLdM Vendor or Software Link: http://sourceforge.net/projects/gcomm-sg/ Version: 0.1 Category:: Database Backup Disclosure...

easyCMSlite 1.0.9 Database Information Disclosure

Exploit Title: easyCMSlite v.1.0.9 - Database Information Disclosure Google Dork: - Date: 7/2012 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ Software Link: http://www.easycmslite.com/ Version: v.1.0.9 Tested on: Windows / Linux =============== Description ===============...

ASP Content Management Database Disclosure

=========================================== ASP Content Management Mullti Vulnerability =========================================== Vendor: http://www.aspcontentmanagement.com/aspcontentmanagement.zip Date: 2012-06-06 Author : indoushka Tested on : windows SP2 Francais V.Pnx2 2.0 Exploit By...

BlogX Database Disclosure

!/usr/bin/perl -w BlogX Database Disclosure Exploit Found & Coded: indoushka Date: 06/06/2012 Download : http://blogx.co.uk/Download.asp use LWP::Simple; use LWP::UserAgent; system'cls'; system'title BlogX Database Disclosure Exploit '; system'color a'; if@ARGV new; my $request =...

php jokesite v2.0 Multiple Vulnerabilties

Exploit for php platform in category web applications php jokesite v2.0 Multiple Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.scriptdemo.com/ .:. Tested On Demo :...

Yamamah 1.1.0 Database Disclosure

--------------------------------------- Author : L3b-r1'z Title : Yamamah Database backup Download Date : 5/27/2012 Email : [email protected] Site : Sec4Ever.com & Exploit4arab.com Google Dork : allintext: "Copyright © 2010 All rights reserved. Powered By : Yamamah Version 1.1.0" Version : 1.1.0...

DSA-2445-1 typo3-src - several

Bulletin has no description...

eFront Enterprise 3.6.10 Database Disclosure / SQL Injection

Title: ====== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities Date: ===== 2011-10-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=298 VL-ID: ===== 298 Introduction: ============= Tailored with larger organizations in mind, eFront Enterprise offers solutio...

eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities

Document Title: =============== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities References Source: ==================== VL-ID http://www.vulnerability-lab.com/getcontent.php?id=298 CNNVD-201110-705 http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201110-705 Release Date:...

eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities

Document Title: =============== eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities References Source: ==================== VL-ID http://www.vulnerability-lab.com/getcontent.php?id=298 CNNVD-201110-705 http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201110-705 Release Date:...

GotoCode Online Bookstore Privilege Escalation / Database Disclosure

Exploit Title : GotoCode Online Bookstore Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 03/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link : http://www.gotocode.com/apps.asp?appid=3& Platform : ASP.NET Tested...