Auto Car 1.2 Cross Site Scripting / SQL Injection

Exploit Title: Auto car 1.2 - 'cartitle' SQL Injection / Cross-Site Scripting Date: 2018-05-22 Exploit Author: Borna nematzadeh L0RD Vendor Homepage: https://codecanyon.net/item/auto-car-car-listing-script/19221368?srank=1159 Version: 1.2 Tested on: Win 10 POC 1: SQLi: Parameter: cartitle Type:...

PVS targets using MAK Licensing intermittently fail to reactivate

PVS targets using a vdisk that has the radio button set to MAK licensing will intermittently fail to reactivate after rebooting. PVS CDF traces may also show an error that the device does not exist in the VAMT database. "Device: 10.10.10.10 not found in Vamt database."...

CVE-2017-16735

A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identified, which generates an error in the database log...

Ciuis CRM 1.0.7 - SQL Injection

Ciuis CRM 1.0.7 - SQL Injection Exploit Title: Ciuis CRM v 1.0.7 Sql Injection Google Dork: if applicable Date: 12/15/2017 Exploit Author: Zahid Abbasi Contact: http://twitter.com/zahidsec Website: http://zahidabbasi.com Vendor Homepage: http://ciuis.com/ Software Link:...

Ciuis CRM 1.0.7 - SQL Injection

Exploit Title: Ciuis CRM v 1.0.7 Sql Injection Google Dork: if applicable Date: 12/15/2017 Exploit Author: Zahid Abbasi Contact: http://twitter.com/zahidsec Website: http://zahidabbasi.com Vendor Homepage: http://ciuis.com/ Software Link: https://codecanyon.net/item/ciuis-crm/20473489 Version:...

November 2, 2017—KB4052232 (OS Build 10586.1177)

None None...

Database Creation Error when creating a new WEM database using a hyphen ("-") in the database name

When attempting to create a new WEM database when using a hyphen '-'in the name, an error appears saying "Database Creation Error". The Citrix WEM Database Management Utility Debug Log contains the following Exception: Exception - CreateVuemdb.Run : SqlDatabaseHelper. connection Error : 102 |...

Error while creating WEM database: "Database creation error!"

Database Creation Wizard produces the following error while creating a new WEM database: "Database creation error!". The Citrix WEM Database Management Utility Debug log file located in "C:\Program Files x86\Norskale\Norskale Infrastructure Services" reports the following error when attempting to...

Cross-site Scripting (XSS)

dolibarr is vulnerable to cross-site scripting attacks. The attacker can inject and execute arbitrary code when calling the $db-lastqueryerror function in functions.lib.php...

PVS Servers Show Offline on PVS Console - Event ID 11 - Undefined Database Error

PVS server shows offline in the PVS console, although Streaming service is running on occasion: An error in event viewer: Event ID: 11 – Undefined database error/PVS server status is "Down" This is an internal error. Please contact technical support...

WEM Database Creation Error Message regarding "Path Specified" when creating WEM database

When attempting to create a WEMDatabase using the Database Management Utility Console, it failswith: "Database Creation Error" The Citrix WEM Database Management Utility Debug Log shows the following exception:"Exception - CreateVuemdb.Run : SqlDatabaseHelper. connection Error : 5133 | Directory...

SQL Injection

Due to the requirement for dynamic content of today's web applications, many rely on a database backend to store data that will be called upon and processed by the web application or other programs. Web applications retrieve data from the database by using Structured Query Language SQL queries. T...

Ufo UFO-UAPWS suffers from SQL error reporting injection vulnerability (CNVD-2016-10770)

Ufo UFO-UAPWS Reporting System is an Internet solution for enterprises. A SQL reporting error injection vulnerability exists in UFIDA UFO-UAPWS. An attacker exploiting the vulnerability can view sensitive information, obtain database information, and cause information leakage...

Target Device Not Booting Up with message "No entry found in the database".

Targets are not booting in Provisioning Server. You can see the error during boot:No entry found in the database...

Enterprise Manager Install fails with Patched Database Error

Purpose If the Veeam Backup Enterprise Manager software is moved, or needs to be reinstalled and it was previously patched it errors out with the following error: Cause The SQL database that is being reused contains table entries that mark it as having been used with a newer version the version o...

Discuz! xxe 可破坏数据库结构，导致脏数据进入

简要描述： Discuz! xxe 可破坏数据库结构，导致脏数据进入.......dz太变态了，小引号也过滤了，妹的，没办法只能分析到这里，但是隐约感觉到，这里存在很大的风险，因为改变了系统模板风格，先发个福利，大家自己看吧 详细说明： 首先我们看文件: portalcpdiy.php（lines:301-324）: if submitcheck'importsubmit' $isinner = false; $filename = ''; if$POST'importfilename' $filename =...

Dolibarr ERP/CRM 3.5.3 - Multiple Vulnerabilities

Vulnerability Name: SQL injection Severity: Critical URL: http://localhost/dolibarr/user/fiche.php Affected Users: All authenticated users Issue details: The "entity" parameter appears to be vulnerable to SQL injection attacks. A single quote was submitted in the entity parameter, and a database...

Dell Kace 1000 Systems Management Appliance多个SQL注入漏洞

BUGTRAQ ID: 65029 Dell Kace 1000 Systems Management Appliance是系统管理设备。 Dell Kace 1000 Systems Management Appliance 5.4.76847及其他版本没有正确过滤getUploadPath及getKBot SOAP方法的"macAddress"参数值，可导致注入任意SQL代码，从而操作SQL查询。 0 Dell Kace 1000 Systems Management Appliance 5.4.76847 厂商补丁： Dell ----...

Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections

Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections source: https://www.securityfocus.com/bid/65029/info Dell Kace 1000 Systems Management Appliance is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input befor...

Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/65029/info Dell Kace 1000 Systems Management Appliance is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to...