mysql: C API unspecified vulnerability (CPU Jul 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: C API. Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attack...

The vulnerability of the software of Siemens SICAM PAS systems for power management and control involves insufficient protection of passwords in the databases, allowing attackers to calculate the passwords.

The vulnerability of the software in Siemens SICAM PAS systems for telecontrol and telemanagement is related to insufficient protection of passwords in the databases. Exploiting this vulnerability allows a malicious actor, operating locally, to calculate the passwords using certain privileges...

Shaanxi Knight Technology Development Co., Ltd. enterprise station building system has SQL injection vulnerability

Ltd. is a website design company with website construction and visual design development and brand online marketing promotion. Ltd. corporate website building system suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect (and IBM DB2 Connect servers), is related to deficiencies in access control. This allows attackers to obtain elevated privileges.

The vulnerabilities of IBM DB2 database management systems, including IBM DB2 Connect and the IBM DB2 Connect server, are related to deficiencies in access control. Exploiting these vulnerabilities can allow an attacker, operating locally, to gain elevated privileges and re-record DB2-formatted...

IBM DB2 Security Bypass Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBM i, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2. An attacker can exploit the vulnerability to activate the...

CVE-2017-1452

IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 includes DB2 Connect Server could allow a local user to obtain elevated privilege and overwrite DB2 files. IBM X-Force ID: 128180...

CVE-2014-8677

The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being used, the configuration database is down, and...

CVE-2014-8677

SO Planning (SOPlanning) 1.32 and earlier is vulnerable to multiple issues, including SQL injection, XSS and PHP code injection. Specifically, CVE-2014-8677 describes that remote authenticated users with a prepared database or the ability to create arbitrary databases, or PHP < 5.2 with an con...

Command Execution Vulnerability in Xinqi Online Learning System /ajax/GetForm.ashx Page

Online Learning System is an e-learning platform system developed in . A command execution vulnerability exists in the /ajax/GetForm.ashx page of Xinqi Online Learning System. An attacker can exploit this vulnerability to execute arbitrary SQL statements...

Yunnan Dandelion Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Yunnan Dandelion Network Technology Co., Ltd. is a station building system. A SQL injection vulnerability exists in Yunnan Dandelion Network Technology Co. The vulnerability is due to the system id parameter does not filter the data submitted by the user, a remote attacker can exploit the...

SQL Injection Vulnerability in the Latest Version of YxtCMF

YxtCMF online learning system is an online learning platform system developed with thinkphp+bootstrap as the framework. The latest version of YxtCMF has a SQL injection vulnerability, which is exploited by attackers to obtain database sensitive information...

PostgreSQL Security Bypass Vulnerability (CNVD-2017-26577)

PostgreSQL is a free object-relational database management system developed by the PostgreSQL development group. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A security bypass vulnerability exists in PostgreSQL. ...

CVE-2017-6757

A vulnerability in Cisco Unified Communications Manager 10.52.10000.5, 11.01.10000.10, and 11.51.10000.6 could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass...

SQL injection vulnerability in news-details.php page of Interactive Creation website builder system

Interactive Creative Xiamen Digital Technology Co., Ltd. is a brand website construction company in Fujian Province, "Interactive Creative" is one of its independent brands. A SQL injection vulnerability exists in the news-details.php page of the Interactive Creative website builder system. An...

Cross site scripting

MySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to the user...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall System v2.1.3 SQL injection vulnerability exists in the address and index methods, due to the system fails to filter user-supplied parameters. An attack...

CVE-2017-10989

The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact...

Code injection

install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the databaseusername, databasehost, or databasepassword parameter...

SQL Injection Vulnerability in Lazy WorkPass OA Web Intelligent Office System

Lazy work pass OA network intelligent office system is suitable for enterprises and institutions of the general network office software, the system uses B / S operation mode, free version for small and medium-sized enterprises. There is a SQL injection vulnerability in the OA Network Intelligent...

Joomla! 3.7.x < 3.7.1 fields.php getListQuery() Method SQLi

According to its self-reported version number, the Joomla! installation running on the remote web server is 3.7.x prior to 3.7.1. It is, therefore, affected by a SQL injection vulnerability in the fields.php script due to improper sanitization of user-supplied input. An unauthenticated, remote...