61 matches found
CVE-2021-31817
When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext...
WordPress WP Activity Log plugin <= 4.1.4 - SQL Injection (SQLi) in External Database Module vulnerability
SQL Injection SQLi in External Database Module vulnerability found by WP deeply in WordPress WP Activity Log plugin versions = 4.1.4 . Solution Update the WordPress WP Activity Log plugin to the latest available version at least 4.1.5...
WP Activity Log < 4.1.5 - SQL Injection in External Database Module
Two SQL Injection vulnerabilities were identified in the WP Activity Log WordPress plugin. The changelog of the plugin states: "SQL Injection in external database module reported by WP deeply. Thank you for the responsible disclosure."...
LG SuperSign CMS Authentication Bypass Vulnerability
LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. An authentication bypass vulnerability exists in LG SuperSign CMS, which can be exploited by an...
WSTSHOP open source version controller\Index.php file reload vulnerability
WSTSHOP open source version is a php language based on the development of B2C open source online store system . WSTSHOP open source version controller\Index.php file reload vulnerability . Allow attackers to exploit the vulnerability reload connection to a malicious external database , etc...
"Unexpected error from external database driver" error when you create or open Microsoft Excel .xls files
"Unexpected error from external database driver" error when you create or open Microsoft Excel .xls files Summary This security update resolves an issue that was introduced in the October 10, 2017, update. Because of this issue, applications that are based on the Microsoft JET Database Engine...
Project Zero - A Team of Star-Hackers Hired by Google to Protect the Internet
Today Google has publicly revealed its new initiative called “Project Zero,” a team of Star Hackers and Bug Hunters with the sole mission to improve security and protect the Internet. A team of superheroes in sci-fi movies protect the world from Alien attack or bad actors, likewise Project Zero i...
CVE-2012-4553
Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient conditions."...
CVE-2012-4553
Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient conditions."...
CVE-2012-4553
Removed by vendor...
FreeBSD : drupal7 -- multiple vulnerabilities (2adc3e78-22d1-11e2-b9f0-d0df9acfd7e5)
Drupal Security Team reports : - Arbitrary PHP code execution A bug in the installer code was identified that allows an attacker to re-install Drupal using an external database server under certain transient conditions. This could allow the attacker to execute arbitrary PHP code on the original...
Drupal 7.x < 7.16 Multiple Vulnerabilities
The remote web server is running a version of Drupal that is 7.x prior to 7.16. It is, therefore, potentially affected by multiple vulnerabilities : - An arbitrary PHP code execution vulnerability exists due to an error in the 'installer.php' script. An attacker, under certain conditions, could u...
drupal7 -- multiple vulnerabilities
Drupal Security Team reports: Arbitrary PHP code execution A bug in the installer code was identified that allows an attacker to re-install Drupal using an external database server under certain transient conditions. This could allow the attacker to execute arbitrary PHP code on the original...
Fedora Update for perl-RT-Authen-ExternalAuth FEDORA-2012-11337
Check for the Version of perl-RT-Authen-ExternalAuth OpenVAS Vulnerability Test Fedora Update for perl-RT-Authen-ExternalAuth FEDORA-2012-11337 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
[SECURITY] Fedora 17 Update: perl-RT-Authen-ExternalAuth-0.11-1.fc17
A complete package for adding external authentication mechanisms to RT. It currently supports LDAP via Net::LDAP and External Database authentication for any database with an installed DBI driver...
[SECURITY] Fedora 16 Update: perl-RT-Authen-ExternalAuth-0.11-1.fc16
A complete package for adding external authentication mechanisms to RT. It currently supports LDAP via Net::LDAP and External Database authentication for any database with an installed DBI driver...
UBUNTU-CVE-2012-0937
DISPUTED wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via th...
CVE-2005-4744
Off-by-one error in the sqlerror function in sqlunixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single...
Lawson weak permissions
Access restriction is not used during access to external DBMS...
CVE-2002-0586
Format string vulnerability in NsPdLog function for the external database driver proxy daemon library libnspd.a of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters...