File Upload Vulnerability in metinfo Mito System

metinfo mito system is an enterprise website management system with PHP Mysql architecture. A file upload vulnerability exists in metinfo Mito System, which can be exploited by attackers to upload arbitrary files...

The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Vulnerability of the Server component: Security: Database management system MySQL roles, which allow a hacker to cause a service failure

The vulnerability of the Server component: Security: Roles of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability may allow a malicious actor to cause service interruptions...

The vulnerability of the InnoDB component of the MySQL database management system, which allows a hacker to alter file access rights or cause service interruptions.

The vulnerability of the InnoDB component in the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow an attacker to modify file access rights or cause service interruptions...

The vulnerability of the InnoDB component of the MySQL database management system, which allows a hacker to cause a service failure

The vulnerability of the InnoDB component in the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Vulnerability of the Server component: DML operations of the MySQL database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server component: The DML mechanism of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Vulnerability of the Server component: Connection Handling in the MySQL database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server: Connection Handling component of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

phpMyAdmin Arbitrary File Read Vulnerability

phpMyAdmin is a PHP-based database management tool for MySQL on Web-Base, allowing administrators to manage MySQL databases with a Web interface. An arbitrary file read vulnerability exists in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration is set to true, an attacker can...

CVE-2018-17957

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool RMT before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database...

CVE-2018-17957: Invocation of Process Using Visible Sensitive Information

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool RMT before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database...

iWebShop open source mall system has xss vulnerability

iWebShop open source mall system is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source mall system . The system is divided into front-end , back-office and merchant . iWebShop open source mall system has an xss vulnerability that can be...

CVE-2018-15719

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information...

CVE-2018-15719

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information...

Fleetco Fleet Maintenance Management 1.2 Remote Code Execution

Exploit Title: Fleetco Fleet Maintenance Management 1.2 - Remote Code Execution Date: 2018-11-23 Exploit Author: Azkan Mustafa AkkuA AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://www.fleetco.space Software Link: http://www.fleetco.space/download/215/ Version: v1.2 Category: Webap...

Improper access control

Incorrect access control in the /mysql/api/droboapp/data endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve the MySQL database root password...

CVE-2018-14703

Incorrect access control in the /mysql/api/droboapp/data endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve the MySQL database root password...

UKCMS has an information leakage vulnerability

UKcms is a web content management system based on PHP7 and mysql technology. UKCMS is vulnerable to information leakage. An attacker can obtain information about database backup files through constructed links...

PT-2018-12675

Name of the Vulnerable Software and Affected Versions Drobo 5N2 NAS version 4.0.5-13.28.96115 Description The issue concerns incorrect access control in the "/mysql/api/droboapp/data" endpoint, allowing unauthenticated attackers to retrieve the MySQL database root password. Recommendations For...

PT-2018-13194

Name of the Vulnerable Software and Affected Versions Dell OpenManage Network Manager versions prior to 6.5.0 Description The issue is related to an insecure default configuration setting for the embedded MySQL database, which allows MySQL users to have read/write access to the file system...

CVE-2018-19654

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. There is a discrepancy in username checking between a component that does string validation, and a component that is supposed to query a MySQL database. Thus, it is possible to register a new account with a...