3378 matches found
FreeBSD : phpmyadmin -- multiple vulnerabilities (ca3fe5b3-185e-11ea-9673-4c72b94353b5)
the phpmyadmin team reports : This security fix is part of an ongoing effort to improve the security of the Designer feature and is designated PMASA-2019-5. There is also an improvement for how we sanitize git version information shown on the home page. C Tenable Network Security, Inc. The...
SQL Injection
phpmyadmin/phpmyadmin is vulnerable to SQL injection. The vulnerability exists as the database and table name of designer feature is not properly sanitized to prevent arbitrary SQL query to be injected and executed...
CVE-2019-18622
An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...
DEBIAN-CVE-2019-18622
An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...
CVE-2019-18622
An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...
CVE-2019-18622
An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...
Unrestricted file upload
Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload...
CVE-2013-6234: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload...
PT-2019-6991
Name of the Vulnerable Software and Affected Versions SpagoBI versions prior to 4.1 Description The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to the Worksheet designer, and then accessing it via a direct request. This is...
CVE-2019-18622: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...
PT-2019-15539
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.9.2 Description A SQL injection attack can be triggered through the designer feature by using a crafted database or table name. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or later to...
phpmyadmin -- multiple vulnerabilities
the phpmyadmin team reports: This security fix is part of an ongoing effort to improve the security of the Designer feature and is designated PMASA-2019-5. There is also an improvement for how we sanitize git version information shown on the home page...
CMS Made Simple 2.2.8 Remote Code Execution Exploit
An issue was discovered in CMS Made Simple version 2.2.8. In the module DesignManager in the files action.adminbulkcss.php and action.adminbulktemplate.php, with an unprivileged user with Designer permission, it is possible to reach an unserialize call with a crafted value in the m1allparms...
EximiousSoft Logo Designer User Mode Write Access Conflict Vulnerability (CNVD-2019-40495)
EximiousSoft Logo Designer is a professional and powerful logo design software. EximiousSoft Logo Designer 3.82 suffers from a user-mode write access conflict vulnerability starting at ExiVectorRender!StrokeTextBlend+0x00000000000003a7. An attacker could exploit this vulnerability to cause a deni...
EximiousSoft Logo Designer User Mode Write Access Conflict Vulnerability
EximiousSoft Logo Designer is a professional and powerful logo design software. EximiousSoft Logo Designer 3.82 has a user-mode write access conflict starting at ExiCustomPathLib! User-mode write access conflict vulnerability starting at 0x0000000000000053. An attacker could exploit this...
EximiousSoft Logo Designer Buffer Overflow Vulnerability
EximiousSoft Logo Designer is a professional and powerful logo design software. EximiousSoft Logo Designer 3.82 suffers from a heap corruption vulnerability starting with ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78. An attacker can exploit this vulnerability to cause a denial of service...
CVE-2019-18819
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeTextBlend+0x00000000000003a7...
CVE-2019-18820
Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78...
