Design/Logic Flaw

cPanel before 68.0.27 does not validate database and dbuser names during renames SEC-321...

CVE-2018-20937

CVE-2018-20937 affects cPanel before 68.0.27, where database and dbuser names are not validated during rename operations (SEC-321). Multiple connected records (RH, CNVD, NVD, CVE lists) corroborate the same description. The vulnerability stems from insufficient validation in the rename process, p...

WordPress 3.1.3 - SQL Injection

WordPress 3.1.3 - SQL Injection SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple SQL Injection Vulnerabilities product: WordPress vulnerable version: 3.1.3/3.2-RC1 and probably earlier versions fixed version:...

Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL into the backend database on vulnerable installations of Cisco Unified CM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Call Manager component. The system exposes an Apache...

authentix-xss.txt

Description: "Form-based or 100% cookie-free "Basic Authentication" website protection while keeping your NT Users Names and Passwords private. Protect all files, not just ASP pages. Validate against internal database, text file or external ODBC datasource." - www.flicks.com Summary: The Authenti...

Secunia Research: VisNetic Mail Server Two File Inclusion Vulnerabilities

====================================================================== Secunia Research 17/07/2006 - VisNetic Mail Server Two File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...