87 matches found
phpBB 2.0.15 (highlight) Database Authentication Details Exploit
No description provided by source. !/usr/bin/perl tested and working /str0ke...
phpBB 2.0.15 - 'highlight' Database Authentication Details
!/usr/bin/perl tested and working /str0ke...
phpBB 2.0.15 - highlight Database Authentication Details
phpBB 2.0.15 - highlight Database Authentication Details !/usr/bin/perl tested and working /str0ke...
Debian DSA-347-1 : teapop - SQL injection
teapop, a POP-3 server, includes modules for authenticating users against a PostgreSQL or MySQL database. These modules do not properly escape user-supplied strings before using them in SQL queries. This vulnerability could be exploited to execute arbitrary SQL code under the privileges of the...
FileMaker Pro Client Request User Passwords Remote Disclosure
The remote host is running a FileMakerPro server. There is a flaw in the design of the FileMakerPro server which makes the database authentication occur on the client side. A remote attacker could exploit this flaw to gain access to databases by connecting to this port with a rogue client. C...
MySQL 3.23.x/4.0.x - 'COM_CHANGE_USER' Password Length Account
/ source: https://www.securityfocus.com/bid/6373/info A flaw in the password authentication mechanism for MySQL may make it possible for an authenticated database user to compromise the accounts of other database users. The flaw lies in the fact that the server uses a string returned by the clien...
Thatware (PHP)
Informations : °°°°°°°°°°°°°° Versions : ? - 0.3 - 0.5.3 Website : http://www.thatware.org Problems : - Include file - SQL Injection PHP Code/Location : °°°°°°°°°°°°°°°°°°° artlist.php v0.5.2, 0.5.3 : ------------------------------------- include $rootpath.'thatfile.php';...