42 matches found
Sql injection
GreenSQL Firewall greensql-fw, possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL...
CVE-2008-6992
CVE-2008-6992 affects GreenSQL Firewall (greensql-fw) and is described as a bypass of the SQL injection protection mechanism for versions possibly before 0.9.2 or 0.9.4. The vulnerability can be triggered by a WHERE clause containing an expression such as x=y=z, which is parsed by MySQL and allow...
CVE-2008-6992
GreenSQL Firewall greensql-fw, possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL...
CVE-2008-6992: Improper Neutralization of Special Elements used in an SQL Command
GreenSQL Firewall greensql-fw, possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "internal pages."...
CVE-2008-6416
Multiple cross-site scripting XSS vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "internal pages."...
CVE-2008-6417
Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the "installation directory" via unknown vectors...
Design/Logic Flaw
Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the "installation directory" via unknown vectors...
CVE-2008-6417
Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the "installation directory" via unknown vectors...
CVE-2008-6416
Multiple cross-site scripting XSS vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "internal pages."...
CVE-2008-6416
CVE-2008-6416: Multiple XSS weaknesses in GreenSQL-Console
CVE-2008-6417
Technical details about CVE-2008-6417 are not publicly available in the provided documents. Monitor for updates.
CVE-2008-6417: Undefined Security Weakness
Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the "installation directory" via unknown vectors...
CVE-2008-6416: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "internal pages."...
greensql-xss.txt
Site: http://greensql.net/ live-demo: http://demo.greensql.net/ Platform: alls Bug: permanent xss Special condition: none Impact : semi-critical ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1 Introduction =========== GreenSQ...
CVE-2007-5059
Multiple cross-site scripting XSS vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors, as demonstrated by the 1 uname and 2 pass parameters in a login form, and 3 an unspecified "url value," leading to storage of XSS sequences in the...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors, as demonstrated by the 1 uname and 2 pass parameters in a login form, and 3 an unspecified "url value," leading to storage of XSS sequences in the...
CVE-2007-5059
Multiple cross-site scripting XSS vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors, as demonstrated by the 1 uname and 2 pass parameters in a login form, and 3 an unspecified "url value," leading to storage of XSS sequences in the...
CVE-2007-5059
CVE-2007-5059 describes multiple XSS vulnerabilities in GreenSQL’s web interface. The affected component is the login/form handling and related input vectors, specifically the (1) uname, (2) pass parameters in the login form, and (3) an unspecified "url value". The underlying issue is improper in...
