SAP Patches Seven Vulnerabilities in Three Products

SAP pushed out patches to address seven vulnerabilities in three different lines of software it produces. If exploited, the bugs – which weren’t disclosed until yesterday – could expose those running the systems to specialized attacks, information disclosure and in some cases, complete compromise...

[SECURITY] Fedora 21 Update: phpMyAdmin-4.2.8.1-2.fc21

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

[SECURITY] Fedora 19 Update: phpMyAdmin-4.2.6-1.fc19

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

MDBMS 0.96/0.99 Query Display Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2867/info MDBMS is a free relational database management system. A buffer overflow condition exists in MDBMS. By issuing the '\s' command to display the query buffer when it contains a large amount of data, it may be...

Elemata CMS RC3.0 (global.php, id param) - SQL Injection

No description provided by source. Exploit Title : Elemata CMS RC3.0 SQL Injection Date : 23 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://www.elemata.com/ Software Link : http://jaist.dl.sourceforge.net/project/elematacms/Elemata%203.x/ElemataRC3.0.zip...

Fobuc Guestbook 0.9 - SQL Injection Vulnerability

No description provided by source. Exploit Title : Fobuc Guestbook 0.9 SQL Injection Date : 11 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://sourceforge.net/projects/fobuc/ Software Link :...

MidiCart PHP,ASP Shell Upload Vulnerability

No description provided by source. Exploit Title: MidiCart PHP,ASP Shell Upload Vulnerability Date: 17.05.2010 Author: DigitALL Software Link: http://download.cnet.com/MidiCart-PHP-Shopping-Cart/3000-26494-10064577.html Version: All Version Tested on: DigitALL Xp Version x1 Code : dork :...

Hexorbase - Multiple Database Management and Audit Tool

HexorBase is a database application designed for administering and auditing multiple database servers simultaneously from a centralized location, it is capable of performing SQL queries and bruteforce attacks against common database servers MySQL, SQLite, Microsoft SQL Server, Oracle, PostgreSQL...

April 2014 Oracle Critical Patch Update

Software maker and database management company Oracle yesterday released its quarterly Critical Patch Update. The release resolves more than 100 security vulnerabilities, many of which received high common vulnerability scoring system base scores and should be applied as soon as possible. Product...

Oracle Linux 5 : postgresql (ELSA-2014-0249)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0249 advisory. - related 1065840: CVE-2014-0062 - fix 1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064, CVE-2014-0065 Tenable has extracted the...

RHEL 5 : postgresql (RHSA-2014:0249)

Updated postgresql packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

CentOS Update for postgresql84 CESA-2013:1475 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Onpub CMS 1.41.5 - Multiple SQL Injections

Onpub CMS 1.41.5 - Multiple SQL Injections Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory I...

Oracle Database Management Plug-In Unix (October 2013 CPU) (credentialed check)

The Oracle Database Management Plug-In installed on the remote host is missing the October 2013 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities in the Enterprise Manager Base Platform component : - An unspecified flaw exists in the Schema Management subcomponent...

UTA EDU University ENG - SQL Injection Vulnerability

Document Title: =============== UTA EDU University ENG - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=256 Release Date: ============= 2013-08-27 Vulnerability Laboratory ID VL-ID: ==================================== 256...

Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities

Document Title: =============== Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=832 Dell INC000010258726 http://www.vulnerability-lab.com/resources/documents/832.pdf Release Date: =============...

Oracle Linux 3 : postgresql (ELSA-2010-0427)

From Red Hat Security Advisory 2010:0427 : Updated postgresql packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

Oracle Linux 4 : postgresql (ELSA-2010-0428)

From Red Hat Security Advisory 2010:0428 : Updated postgresql packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

Elemata CMS RC3.0 - 'global.php?id' SQL Injection

Exploit Title : Elemata CMS RC3.0 SQL Injection Date : 23 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://www.elemata.com/ Software Link : http://jaist.dl.sourceforge.net/project/elematacms/Elemata%203.x/ElemataRC3.0.zip Version : RC 3.0 Tested on : Windo...

Elemata CMS RC3.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Elemata CMS RC3.0 SQL Injection Date : 23 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://www.elemata.com/ Software Link :...