[SECURITY] Fedora 24 Update: php-5.6.21-1.fc24

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

New Era Company CMS SQL Injection Vulnerability

A remote sql injection vulnerability exists in the New Era Company content management system. A remote attacker is able to execute sql commands in the application and connect to dbms...

los818 CMS SQL Injection Vulnerability

A sql injection vulnerability exists in los818 Content Management System, which allows remote attackers to execute their own sql commands on the web application or connect to dbms...

Oracle Database Server RDBMS Security Component Data Read Vulnerability

Oracle Database Server is a relational database management system from Oracle Corporation, of which RDBMS Security is a database security storage component. A data read vulnerability exists in the RDBMS Security component of Oracle Database Server version 12.1.0.1 and 12.1.0.2, which can be...

CentOS Update for postgresql CESA-2016:0347 centos6

Check the version of postgresql SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882406";...

Important: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

ruvar OA系统 bulletin_template_show.aspx 参数id SQL注入漏洞

0x01 框架概述 璐华RuvarOA机关事业版办公自动化系统是广州市璐华计算机科技有限公司专门针对我国党政机关、大型企事业单位开发，采用组件技术和Web技术相结合，基于Windows平台，构建在大型关系数据库管理系统基础上的，以行政办公为核心，以集成融通业务办公为目标，将网络与无线通讯等信息技术完美结合在一起设计而成的新型办公自动化应用系统。 该系统根据中国国情和行政管理的惯例，旨在从根本上提高办公及行政管理的效率和水平，并借助与计算机与信息科技的成果为领导和决策人员提供全面及时的决策支持服务，是颇具实用性、先进性、经济性的政府机关协同办公系统。...

PressePortal NewsAktuell (DPA) XSS / SQL Injection

Document Title: =============== PressePortal NewsAktuell DPA - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1676 Vulnerability Magazine:...

PressePortal NewsAktuell (DPA) - Multiple Vulnerabilities

Document Title: =============== PressePortal NewsAktuell DPA - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1676 Vulnerability Magazine:...

los818 CMS 2016 Q1 - SQL Injection Web Vulnerability

Document Title: =============== los818 CMS 2016 Q1 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1680 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 1680...

WebMartIndia CMS 2016 Q1 - SQL Injection Vulnerability

Document Title: =============== WebMartIndia CMS 2016 Q1 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1681 Release Date: ============= 2016-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 168...

Cacti 0.8.8f graphs_new.php SQL Injection

Application: Cacti Vendor URL: http://www.cacti.net Bugs: SQL injection Author:changzhao.maoDBAPPSecurity Ltd Version affected: 0.8.8f and prior ================================ Introduction ================================ Cacti is a complete frontend to RRDTool, it stores all of the necessary...

Blade - A Webshell Connection Tool With Customized WAF Bypass Payloads

Blade is a webshell connection tool based on console, currently under development and aims to be a choice of replacement of Chooper 中国菜刀. Chooper is a very cool webshell client with widly typies of server side scripts supported, but Chooper can only work on Windows opreation system, so this is th...

Cacti 0.8.8f SQL Injection Vulnerability

Cacti versions 0.8.8f and below suffer from a remote SQL injection vulnerability. Application: Cacti Vendor URL: http://www.cacti.net Bugs: SQL injection Author:changzhao.maoDBAPPSecurity Ltd Version affected: 0.8.8f and prior ================================ Introduction...

Cacti 0.8.8f SQL Injection

Application: Cacti Vendor URL: http://www.cacti.net Bugs: SQL injection Author:changzhao.maoDBAPPSecurity Ltd Version affected: 0.8.8f and prior ================================ Introduction ================================ Cacti is a complete frontend to RRDTool, it stores all of the necessary...

CIS Manager CMS 2015Q4 SQL Injection Vulnerability

CIS Manager Content Management System 2015Q4 suffers from a remote SQL injection vulnerability. Document Title: =============== CIS Manager Content Management System 2015Q4 - SQL Injection Vulnerability Product & Service Introduction: =============================== The Constructive Internet...

CIS Manager CMS 2015Q4 - SQL Injection Vulnerability

Document Title: =============== CIS Manager CMS 2015Q4 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1652 Release Date: ============= 2015-11-25 Vulnerability Laboratory ID VL-ID: ==================================== 1652...

[SECURITY] Fedora 22 Update: postgresql-9.4.5-1.fc22

PostgreSQL is an advanced Object-Relational database management system DBM S. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine ...

Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available f...

Y-R-S CMS 2015Q4 - (ID) SQL Injection Web Vulnerability

Document Title: =============== Y-R-S CMS 2015Q4 - ID SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1644 Release Date: ============= 2015-11-17 Vulnerability Laboratory ID VL-ID: ==================================== 1644...