2014 matches found
DV Cart Shopping Cart software - SQL Injection
DV Cart Shopping Cart software - SQL Injection Exploit Title: DV Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.esmistudio.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input...
Tecwyn Thomas SQL Injection
|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...
AllVideos Reloaded! Plugin for Joomla! 'divid' Parameter SQLi
The version of the AllVideos Reloaded! plugin for Joomla! running on the remote host is affected by a SQL injection vulnerability in the views/popup/view.html.php script due to improper sanitization of user-supplied input to the 'divid' parameter before using it to construct database queries...
[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.3.1-1.fc15
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...
Josh Shaul on Broken Security, Targeted Attacks and Database Security
Dennis Fisher talks with Josh Shaul of AppSec about the current run of targeted attacks and data breaches, the state of denial among some security and IT staffs about the extent of the problem and what can be done to address the issues. Podcast audio courtesy of sykboy65 Subscribe to the Digital...
WordPress 3.1.3 SQL Injection Vulnerabilities
Exploit for php platform in category web applications title: Multiple SQL Injection Vulnerabilities product: WordPress vulnerable version: 3.1.3/3.2-RC1 and probably earlier versions fixed version: 3.1.4/3.2-RC3 impact: Medium homepage: http://wordpress.org/ found: 2011-06-21 by: K. Gudinavicius...
Joomla! Component com_morfeoshow - 'idm' SQL Injection
source: https://www.securityfocus.com/bid/48452/info The 'commorfeoshow' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
MySQLDriverCS 4.0.1 - SQL Injection
source: https://www.securityfocus.com/bid/48466/info MySQLDriverCS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or...
Q&A: Database Security Expert David Litchfield
With all of the talk around the importance of web and application security, why is there so little focus on the corporate databases, which store the most valuable data? Last week, at the annual Computer Enterprise and Investigations Conference, Threatpost had the opportunity to sit down with note...
What the Sony PlayStation Network Attack Can Teach Us About Database Security
Sony’s PlayStation Network was breached between April 17 and April 19 and was taken offline by Sony on April 20. At the time of this writing, the service is still not available and it might not be available until the end of May. Much speculation has ensued on what has actually happened and the...
WordPress Sermon Browser Plugin 0.43 - SQL Injection
Sermon Browser plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
Pangolin v3.2.3 Released, Download Now !
Pangolin v3.2.3 Released, Download Now ! "Pangolin is a penetration testing, SQL Injection test tool on database security. It finds SQL Injection vulnerabitlities.Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL...
Etki Video PRO 2.0 - kategori.asp?cat SQL Injection
Etki Video PRO 2.0 - kategori.asp?cat SQL Injection source: https://www.securityfocus.com/bid/47298/info Etki Video Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...
Multiple Vulnerabilities in Ajax Category Dropdown
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Ajax Category Dropdown WordPress plugin which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Ajax Category Dropdown The vulnerability...
Cetera eCommerce - Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/47044/info Cetera eCommerce is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...
DB Audit v4.2.29 all-in-one database security and auditing solution !
DB Audit v4.2.29 all-in-one database security and auditing solution ! .DB Audit Expert is a professional all-in-one database security and auditing solution for Oracle, Sybase, DB2, MySQL and Microsoft SQL Server. DB Audit Expert enables database and system administrators, security administrators,...
HTB22858: SQL Injection in WP Forum wordpress plugin
Vulnerability ID: HTB22858 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumwordpressplugin.html Product: WP Forum wordpress plugin Vendor: Fredrik Fahlstad http://www.fahlstad.se/ Vulnerable Version: 1.7.8 Vendor Notification: 15 February 2011 Vulnerability Type: SQL Injection Ris...
CVE-2010-4022
The dostandalone function in the MIT krb5 KDC database propagation daemon kpropd in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service listening process...
RunCMS 2.2.2 - register.php SQL Injection
RunCMS 2.2.2 - register.php SQL Injection source: https://www.securityfocus.com/bid/46342/info RunCMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
