94 matches found
SQLiteManager 1.2.4 Remote PHP Code Injection Vulnerability
Exploit for multiple platform in category remote exploits Description: =============================================================== Exploit Title: SQLiteManager 0Day Remote PHP Code Injection Vulnerability Google Dork: intitle:SQLiteManager inurl:sqlite/ Date: 23/01/2013 Exploit Author: RealGa...
SQLiteManager 1.2.4 - Remote PHP Code Injection
SQLiteManager 1.2.4 - Remote PHP Code Injection !/usr/bin/env python ''' Description: =============================================================== Exploit Title: SQLiteManager 0Day Remote PHP Code Injection Vulnerability Google Dork: intitle:SQLiteManager inurl:sqlite/ Date: 23/01/2013 Exploit...
SQLiteManager 1.2.4 - Remote PHP Code Injection
!/usr/bin/env python ''' Description: =============================================================== Exploit Title: SQLiteManager 0Day Remote PHP Code Injection Vulnerability Google Dork: intitle:SQLiteManager inurl:sqlite/ Date: 23/01/2013 Exploit Author: RealGame Vendor Homepage:...
Apache Geronimo <= 2.1.3 Multiple Directory Traversal Vulnerabilities
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-018 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Directory Traversal File Upload Exploits: YES Reported: 10.12.2008 Vendor...
Joekoe(乔客CMS)3.0Sql注入漏洞
JoekoeCMS3在获取客户端浏览器类型参数User-agent时没有严格过滤,导致在引入查询时可以通过修改数据包构造特殊的user-agent值来达到添加后台管理员等目的。 JoekoeCMS3将所有类都封装在了一个JoekoeCMS3b.dll的Dll中, Joekoe是通过cls.ipsys1来获取客户端的User-Agent,所以在其程序中调用cls.ipsys1并放入SQL查询的页面\common\review.asp、\forum\post.asp、\forum\inc\incpost.asp均存在此漏洞。...
Symantec Veritas NetBackup network backup daemons multiple buffer overflows
Buffer overflows in vnetd, volume manager, database manager...
dbmanDefault.txt
Tunis the 31/jan/2006 bug found by Fireboy [email protected] Product affected:DBMan for Windows and Unix Product vendor: http://www.gossamer-threads.com the problem with DBman is default passwords these are default pass : admin/admin,author/author,guest/guest if the admin not change the pas...
Database Manager Default pass
Tunis the 31/jan/2006 bug found by Fireboy [email protected] Product affected:DBMan for Windows and Unix Product vendor: http://www.gossamer-threads.com the problem with DBman is default passwords these are default pass : admin/admin,author/author,guest/guest if the admin not change the pas...
CVE-2003-0943
web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via 1 waecho, 2 Web SQL Interface websql, or 3 Web Database Manager webdbm...
CVE-2003-0945
CVE-2003-0945 affects SAP DB Web-tools Web Database Manager prior to 7.4.03.30. The vulnerability stems from generating predictable session IDs in the Web Database Manager, with IDs placed in the URL, enabling remote attackers to perform unauthorized activities. The issue is addressed by SAP with...
CVE-2003-0945
The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities...
CVE-1999-1428
The CVE-1999-1428 entry affects Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2. The vulnerability is a local privilege escalation in the Database Manager, which runs with setgid bin privileges; successful exploitation would grant elevated privileges to local users. The underlying issue is t...
CVE-1999-1428
Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges...
CVE-1999-1428
Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges...