47 matches found
CVE-2019-7731
Concrete details found: CVE-2019-7731 affects MyWebSQL 3.7 with a remote code execution vulnerability. The root cause described across sources is that an attacker can write shell code into the database and trigger the Backup Database function using a .php filename for the archive, enabling RCE. C...
CVE-2019-7731: Use of Incorrectly-Resolved Name or Reference
MyWebSQL 3.7 has a remote code execution RCE vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file...
CVE-2019-7730: Cross-Site Request Forgery (CSRF)
MyWebSQL 3.7 has a Cross-site request forgery CSRF vulnerability for deleting a database via the /?q=wrkfrm&type=databases URI...
CVE-2019-7544
An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-site Scripting XSS vulnerability in the User Name Field...
Cross site scripting
An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-site Scripting XSS vulnerability in the User Name Field...
CVE-2019-7544
An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-site Scripting XSS vulnerability in the User Name Field...
CVE-2019-7544
CVE-2019-7544 affects MyWebSQL 3.7. The vulnerability is a Stored Cross-site Scripting (XSS) in the Add User function of the User Manager pages, specifically in the User Name Field. The issue is documented across multiple sources (NVD, Red Hat, OpenVAS, CVE lists), confirming a stored XSS flaw ra...
CVE-2019-7544
An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-site Scripting XSS vulnerability in the User Name Field...
CVE-2019-7544: Improper Neutralization of Input During Web Page Generation
An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-site Scripting XSS vulnerability in the User Name Field...
MyWebSQL Database Manager Component Cross-Site Scripting Vulnerability
MyWebSQL is a web-based MySQL database management client developed by software developer Samnan ur Rehman. database manager component is one of the database management components. A cross-site scripting vulnerability exists in the database manager component of MyWebSQL version 3.6. A remote...
CVE-2017-1000011
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information...
CVE-2017-1000011
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information...
Cross site scripting
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information...
CVE-2017-1000011: Improper Neutralization of Input During Web Page Generation
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information...
CVE-2017-1000011
CVE-2017-1000011 affects MyWebSQL version 3.6, with a stored XSS vulnerability in the database manager component. This can lead to account takeover or theft of information through cross-site scripting. Public documents consistently identify this as a stored XSS issue without detailing exploit vec...
CVE-2017-1000011
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information...
MyWebSQL 3.6 Cross Site Request Forgery Vulnerability
MyWebSQL version 3.6 suffers from a cross site request forgery vulnerability. 1. Introduction Affected Product: MyWebSQL 3.6 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://mywebsql.net/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 09/01/2015 Disclosed t...
MyWebSQL 3.6 Cross Site Request Forgery
Security Advisory - Curesec Research Team 1. Introduction Affected Product: MyWebSQL 3.6 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://mywebsql.net/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 09/01/2015 Disclosed to public: 10/07/2015 Release mode:...
Reflected Cross-Site Scripting (XSS) in MyWebSQL
Advisory ID: HTB23221 Product: MyWebSQL Vendor: http://mywebsql.net/ Vulnerable Versions: 3.4 and probably prior Tested Version: 3.4 Advisory Publication: June 25, 2014 without technical details Vendor Notification: June 25, 2014 Public Disclosure: September 3, 2014 Vulnerability Type: Cross-Site...