2014 matches found
Kayako eSupport 2.x Ticket System Multiple SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/12037/info Kayako eSupport is prone to multiple input validation vulnerabilities. One cross-site scripting and six SQL injection vulnerabilities. These issues may collectively threaten compromise of software and database...
ContentServ 3.0/3.1/4.0 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15956/info ContentServ is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
PHPNuke 4.x/5.x SQL_Debug Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3906/info PHPNuke is a website creation/maintenance tool. It is can be back-ended by a number of database products such as MySQL, PostgreSQL, mSQL, Interbase, Sybase, etc. The sqllayer.php script contains a debugging...
CartWIZ 1.10 ProductCatalogSubCats.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13331/info CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query. Successful exploitatio...
Oracle 8 oratclsh Suid Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/159/info Oracle8 is an enterprise level database. As part of the Internet Agent option installation process it installs the file $ORACLEHOME/bin/oratclsh as suid root. oratclsh is a TCL application that provides full acce...
VideoCMS 3.1 - SQL Injection Vulnerability
No description provided by source. VideoCMS SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 14, 2009 Software Information + Vendor : http://www.codemight.com/ + version : 3.1 or lower maybe also affected + Vulnerabilit...
Image gallery with Access Database default.asp Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21131/info Image gallery with Access Database is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...
BatmanPorTaL - profil.asp id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/29057/info BatmanPorTaL is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to...
X-Scripts X-Protection 1.10 Protect.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19235/info X-Protection is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
Ingenium Learning Management System 5.1/6.1 Reversible Password Hash Weakness
No description provided by source. source: http://www.securityfocus.com/bid/5970/info Ingenium Learning Management System uses a weak algorithm to hash user and administrative credentials. Passwords may be trivially obtained by reversing the password hash. An attacker must be able to gain...
Web Sihirbazi 5.1.1 'default.asp' Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27031/info Web Sihirbazi is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
WordPress Plugin ENL NewsLetter - '/wp-admin/admin.php' SQL Injection
source: https://www.securityfocus.com/bid/68558/info ENL Newsletter plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to compromise the application, access or modify data, or exploit...
XOOPS Glossaire Module - modulesglossaireglossaire-aff.php SQL Injection
XOOPS Glossaire Module - modulesglossaireglossaire-aff.php SQL Injection source: https://www.securityfocus.com/bid/67460/info Glossaire module for XOOPS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An...
74cms 逻辑漏洞导致sql注入
简要描述： 74cms 逻辑漏洞导致sql注入 详细说明： include/funpersonal.php381-398 $j=getresumebasic$uid,$pid; $searchtab'sex'=$j'sex'; $searchtab'nature'=$j'nature'; $searchtab'marriage'=$j'marriage'; $searchtab'experience'=$j'experience'; $searchtab'district'=$j'district'; $searchtab'sdistrict'=$j'sdistrict';...
CVE-2014-0515
creationtimestamp| type| source ---|---|--- 2014-05-06 06:53:49+00:00| seen| MISP/53688689-7c14-4708-a50b-3470950d2109 2014-05-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33333 2014-09-08 07:58:27+00:00| seen| MISP/540d6156-d97c-46ec-b14f-490e950d210b 2014-09-19...
Sqlninja Automated SQL Injection tool
Sqlninja is an automated SQL Injection tool. Remote attackers can use Sqlninja to fetch data from the database and execute SQL statements...
Researcher Warns of Critical Flaws in Oracle Servers
There are two vulnerabilities in some of Oracle’s older database packages that allow an attacker to access a remote server without a password and even view the server’s filesystem and dump arbitrary files. Oracle has not released a patch for one of the flaws, even though it was reported by a...
Encrypt password variables
All variables are currently stored in the database with no encryption Exceptions are repository passwords and Bamboo passwords which are irreversibly hashed/salted. ex. : Deployment variables that contain passwords are stored in the database with no encryption. So anyone with access to the databa...
Command School Student Management System - '/sw/admin_subjects.php?id' SQL Injection
source: https://www.securityfocus.com/bid/64707/info Command School Student Management System is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. A cross-site request forgery vulnerability 3. A cross-site scripting vulnerability 4. An HTML injection...