1999 matches found
CVE-2021-41651
CVE-2021-41651 describes a blind SQL injection in the Raymart DG / Ahmed Helal Hotel-mgmt-system. The vulnerability resides in the vulnerable parameter cid of process_update_profile.php , allowing an attacker to retrieve sensitive database information via unauthenticated, time-based blind techniq...
CVE-2021-32762
CVE-2021-32762 affects Redis components (redis-cli, redis-sentinel) via an integer overflow when parsing large multi-bulk network replies due to an overflow in the underlying hiredis library. The vulnerability can lead to heap overflow on affected platforms, with fixed defaults noted: the vulnera...
CVE-2021-41616 Apache ddlutils 1.0 readobject vulnerability
Apache DB DdlUtils 1.0 included a BinaryObjectsHelper that was intended for use when migrating database data with a SQL data type of BINARY, VARBINARY, LONGVARBINARY, or BLOB between databases using the ddlutils features. The BinaryObjectsHelper class was insecure and used...
CVE-2021-30869
creationtimestamp| type| source ---|---|--- 2021-09-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=658 2021-09-24 06:47:09+00:00| exploited| https://t.me/thehackernews/1537 2021-09-24 07:45:25+00:00| exploited| https://t.me/auraxchan/26994 2021-09-24 11:00:34+00:00|...
CVE-2021-39404
MaianAffiliate v1.0 allows an authenticated administrative user to save an XSS to the database...
Design/Logic Flaw
MaianAffiliate v1.0 allows an authenticated administrative user to save an XSS to the database...
CVE-2021-24741
The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters such as statuscode, department, userid, conversationid, conversationstatuscode, and recipientid before using them in SQL statements, leading to SQL injections which are exploitable by unauthenticated users...
IBM DB2 信息泄露漏洞
IBM DB2 is a relational database management system from IBM Corporation of the United States. The system is implemented in UNIX, Linux, IBMi, z/OS, and Windows server versions.IBM Db2 is vulnerable to an information disclosure vulnerability that stems from exposing remote storage credentials to a...
McDonald’s Email Blast Includes Password to Monopoly Game Database
McDonald’s UK Monopoly VIP game kicked off at the end of August, and a recent round of emails sent to winners of the game’s various prizes included more than a coupon for free fries. The franchise accidentally inserted passwords for a McDonald’s server that hosted information tied to the UK...
WordPress SQL Injection Vulnerability (CNVD-2021-70738)
WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin Embed Youtube Video 1.0 and earlier versions are vulnerable to SQL injection, which...
CVE-2021-35946
A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...
CVE-2021-35946
CVE-2021-35946 describes a privilege-escalation flaw in ownCloud Server prior to 10.8: a recipient of a federated share with database access could update permissions and elevate their own privileges. Public details in the provided sources confirm the affected product/version (ownCloud Server befo...
How to Exploit SQL Server Using Registry Keys
At the Imperva Research Labs we have the chance to scrutinize various security situations. In this blog, we will take a closer look at database security on SQL Server. One routine approach that security practitioners employ to protect databases is deploying honeypots and waiting for bad actors to...
How to Exploit SQL Server Using OLE Automation
As part of the Imperva Research Labs we have the opportunity to examine various security scenarios. In this post, we will consider database security on SQL Server. One standard method that security practitioners use to protect databases is deploying honeypots and waiting for hackers to take the...
CVE-2020-20340
A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...
SQL Injection Vulnerability in Smart Meter Integrated Management System of Xintian Technology Corporation (CNVD-2021-70001)
Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A SQL injection vulnerability exists in the Smart Meter Integrated Management System of Xintian Technology Corporation, which can be exploited by attackers to obtain sensitive...
CVE-2020-18913
CVE-2020-18913 affects EARCLINK ESPCMS-P8 with a SQL injection vulnerability in the espcms_web/Search.php component via the attr_array parameter. The issue allows attackers to access sensitive database information. Public details cite both CVSS v2 (base score 5.0, MEDIUM) and CVSS v3.1 (base scor...
SQL Injection in slackero/phpwcms
✍️ Description Data enters a program from an untrusted source 🕵️♂️ Proof of Concept if$result = mysqliquery$db, 'SELECT FROM '. $phpwcms"dbprepend" ? $phpwcms"dbprepend".'' : ''.'phpwcmsuser' 💥 Impact A successful attack may result in the unauthorized viewing of user lists, the deletion of entire...
