42 matches found
CVE-2019-7731
Concrete details found: CVE-2019-7731 affects MyWebSQL 3.7 with a remote code execution vulnerability. The root cause described across sources is that an attacker can write shell code into the database and trigger the Backup Database function using a .php filename for the archive, enabling RCE. C...
CVE-2019-7544
An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-site Scripting XSS vulnerability in the User Name Field...
Cross site scripting
An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-site Scripting XSS vulnerability in the User Name Field...
CVE-2019-7544
An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-site Scripting XSS vulnerability in the User Name Field...
CVE-2019-7544
CVE-2019-7544 affects MyWebSQL 3.7. The vulnerability is a Stored Cross-site Scripting (XSS) in the Add User function of the User Manager pages, specifically in the User Name Field. The issue is documented across multiple sources (NVD, Red Hat, OpenVAS, CVE lists), confirming a stored XSS flaw ra...
CVE-2019-7544
An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-site Scripting XSS vulnerability in the User Name Field...
MyWebSQL Database Manager Component Cross-Site Scripting Vulnerability
MyWebSQL is a web-based MySQL database management client developed by software developer Samnan ur Rehman. database manager component is one of the database management components. A cross-site scripting vulnerability exists in the database manager component of MyWebSQL version 3.6. A remote...
CVE-2017-1000011
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information...
CVE-2017-1000011
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information...
Cross site scripting
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information...
CVE-2017-1000011
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information...
CVE-2017-1000011
CVE-2017-1000011 affects MyWebSQL version 3.6, with a stored XSS vulnerability in the database manager component. This can lead to account takeover or theft of information through cross-site scripting. Public documents consistently identify this as a stored XSS issue without detailing exploit vec...
MyWebSQL 3.6 Cross Site Request Forgery Vulnerability
MyWebSQL version 3.6 suffers from a cross site request forgery vulnerability. 1. Introduction Affected Product: MyWebSQL 3.6 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://mywebsql.net/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 09/01/2015 Disclosed t...
MyWebSQL 3.6 Cross Site Request Forgery
Security Advisory - Curesec Research Team 1. Introduction Affected Product: MyWebSQL 3.6 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://mywebsql.net/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 09/01/2015 Disclosed to public: 10/07/2015 Release mode:...
Reflected Cross-Site Scripting (XSS) in MyWebSQL
Advisory ID: HTB23221 Product: MyWebSQL Vendor: http://mywebsql.net/ Vulnerable Versions: 3.4 and probably prior Tested Version: 3.4 Advisory Publication: June 25, 2014 without technical details Vendor Notification: June 25, 2014 Public Disclosure: September 3, 2014 Vulnerability Type: Cross-Site...
CVE-2014-4735
Cross-site scripting XSS vulnerability in MyWebSQL 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the table parameter to index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in MyWebSQL 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the table parameter to index.php...
CVE-2014-4735
CVE-2014-4735 is a reflected XSS vulnerability in MyWebSQL (v3.4 and earlier) caused by insufficient sanitization of the table HTTP GET parameter passed to index.php. A remote attacker could lure a logged-in administrator to a crafted link and execute arbitrary HTML/JS in the context of the vulne...
CVE-2014-4735
Cross-site scripting XSS vulnerability in MyWebSQL 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the table parameter to index.php...
MyWebSQL 3.4 Cross Site Scripting Vulnerability
MyWebSQL version 3.4 suffers from a cross site scripting vulnerability. Product: MyWebSQL Vendor: http://mywebsql.net/ Vulnerable Versions: 3.4 and probably prior Tested Version: 3.4 Advisory Publication: June 25, 2014 without technical details Vendor Notification: June 25, 2014 Public Disclosure...