CVE-2009-1495

Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb...

CVE-2009-0663

Heap-based buffer overflow in the DBD::Pg aka DBD-Pg or libdbd-pg-perl module 1.49 for Perl might allow context-dependent attackers to execute arbitrary code via unspecified input to an application that uses the getline and pggetline functions to read database rows...

SQL Injection in package DBMS_AQADM_SYS

Name SQL Injection in package DBMSAQADMSYS CVE-2009-0977 Systems Affected Oracle 9.2.0.8 - 10.2.0.3 Severity Medium Risk Category SQL Injection Vendor URL http://www.oracle.com/ Author Franz Hll fh at red-database-security.com CVE CVE-2009-0977 Advisory 14 April 2009 V 1.00 Details: The package...

APEX Password Hash Disclosure

Name Unprivileged DB users can see APEX password hashes Systems Affected APEX 3.0 optional component of 11.1.0.7 installation Severity High Risk Category Password Disclosure Vendor URL http://www.oracle.com/ Author Alexander Kornbrust ak at red-database-security.com CVE CVE-2009-0981 Advisory 14...

Unprivileged DB users can see APEX password hashes

Name Unprivileged DB users can see APEX password hashes Systems Affected APEX 3.0 optional component of 11.1.0.7 installation Severity High Risk Category Password Disclosure Vendor URL http://www.oracle.com/ Author Alexander Kornbrust ak at red-database-security.com CVE CVE-2009-0981 Advisory 14...

SQL Injection in package DBMS_AQIN

Name SQL Injection in package DBMSAQIN CVE-2009-0992 Systems Affected Oracle 10.1.0.5 - 11.1.0.7 Severity High Risk Category SQL Injection Vendor URL http://www.oracle.com/ Author Alexander Kornbrust ak at red-database-security.com CVE CVE-2009-0992 Advisory 14 April 2009 V 1.00 Details: The...

NetHoteles 3.0 SQL Injection

-------------------------AllaH AkbaR------------------------------- NetHoteles v3.0 ficha.php SQL Injection Vulnerability --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

Apache Geronimo Cross Site Scripting

Original advisory http://dsecrg.com/pages/vul/show.php?id=119 Digital Security Research Group DSecRG Advisory DSECRG-09-019 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Multiple XSS Vulnerabilities Exploits: YES...

ablespace 1.0 - Cross-Site Scripting / Blind SQL Injection

riginal advisory: http://dsecrg.com/pages/vul/show.php?id=137 Digital Security Research Group DSecRG Advisory DSECRG-09-037 Application: AbleSpace Versions Affected: 1.0 Vendor URL: http://abk-soft.com/ Bugs: Multiple Blind SQL Injections, Multiple XSS Exploits: YES Reported: 18.03.2009 Vendor...

AbleSpace 1.0 SQL Injection

original advisory: http://dsecrg.com/pages/vul/show.php?id=137 Digital Security Research Group DSecRG Advisory DSECRG-09-037 Application: AbleSpace Versions Affected: 1.0 Vendor URL: http://abk-soft.com/ Bugs: Multiple Blind SQL Injections, Multiple XSS Exploits: YES Reported: 18.03.2009 Vendor...

SQL injection

Added: 04/10/2009 Background Structured Query Language SQL is the most common language understood by modern relational databases. Problem A web program uses input parameters within an SQL query in an unsafe manner. This could allow a remote attacker to inject arbitrary SQL commands via a speciall...

AdaptBB 1.0 (topic_id) SQL Injection / Credentials Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================================== AdaptBB 1.0 topicid SQL Injection / Credentials Disclosure Exploit ===================================================================== !/usr/bin/perl -w AdaptBB 1.0...

Ubuntu: Security Advisory (USN-417-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6493

CVE-2008-6493 affects Easy Content Management Publishing, where sensitive data is stored under the web root with insufficient access control. An attacker can remotely retrieve the News.mdb database by issuing a direct request to Database/News.mdb, exposing partial confidentiality (per the descrip...

Improper access control

Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to cldb.mdb...

CVE-2008-6357

CVE-2008-6357 affects MyCal Personal Events Calendar. The vulnerability arises from storing the database (mycal.mdb) under the web root with insufficient access control, enabling remote attackers to download the database containing usernames and passwords via a direct request. The NVD entry lists...

CVE-2008-6355

The CVE-2008-6355 entry concerns Net Guys ASPired2Protect where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to directly download ASPired2Protect.mdb containing usernames and passwords. The connected records confirm the affected product a...

Ewebeditor2.8.0最终版删除任意文件漏洞

eWebEditor是基于浏览器的、所见即所得的在线HTML编辑器。她能够在网页上实现许多桌面编辑软件（如：Word）所具有的强大可视编辑功能。WEB开发人员可以用她把传统的多行文本输入框TEXTAREA替换为可视化的富文本输入框，使最终用户可以可视化的发布HTML格式的网页内容。eWebEditor!已基本成为网站内容管理发布的必备工具！ 此漏洞存在于Example\NewsSystem目录下的delete.asp文件中，这是ewebeditor的测试页面，无须登陆可以直接进入，看这些代码： ‘ 把带”|”的字符串转为数组 Dim aSavePathFileName...

CVE-2009-0498

CVE-2009-0498 affects Virtual GuestBook (vgbook) 2.1. The data store is placed under the web root with insufficient access control, permitting remote attackers to directly download the database file (guestbook.mdb). This is a file-read access issue driven by improper access restrictions on web-ac...

Synactic ALL_IN_THE_BOX File Overwrite

DSECRG-09-006 Synactis AllINTHEBOX ActiveX Control - Null byte File Owervrite Synactis AllINTHEBOX ActiveX Control ALLINTHEBOX.OCX can be used to owervrite any any file in target system. Vulnerable method is "SaveDoc" Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL:...