CVE-2012-0868

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...

CVE-2012-2311: Improper Neutralization of Special Elements used in an SQL Command

sapi/cgi/cgimain.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script aka php-cgi, does not properly handle query strings that contain a %3D sequence but no = equals sign character, which allows remote attackers to execute arbitrary code by placing command-line options i...

Debian DSA-2418-1 : postgresql-8.4 - several vulnerabilities

Several local vulnerabilities have been discovered in PostgreSQL, an object-relational SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-0866 It was discovered that the permissions of a function called by a trigger are not checked. This...

DSA-2418-1 postgresql-8.4 - several

Bulletin has no description...

Oracle Database Server Multiple Unspecified Vulnerabilities

Oracle database server is prone to SQL command execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-5022

SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

PT-2011-1932

Name of the Vulnerable Software and Affected Versions OlyKit Swoopo Clone 2010 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a product action within the index.php file. Recommendations For OlyKit Swoopo Clone...

PT-2011-1951

Name of the Vulnerable Software and Affected Versions Elite Gaming Ladders versions 3.5 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the match parameter in the matchdb.php file. Recommendations For Elite Gaming Ladders versions...

PT-2011-1829

Name of the Vulnerable Software and Affected Versions chillyCMS version 1.1.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the name parameter in the core/showsite.php file. Recommendations For chillyCMS version 1.1.3, avoid using the name...

PHP-Nuke Multiple Vulnerabilities

PHP-Nuke is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpnuke:php-nuke"; ifdescription...

PT-2011-1651

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.x through 1.5.21 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the filter order or filter order Dir parameter in a com contact action to "index.php"...

CVE-2010-4639

CVE-2010-4639 corresponds to a SQL injection vulnerability in the MySource Matrix product, specifically in index.php where the id parameter can be manipulated to execute arbitrary SQL commands remotely. The entry has a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low complexity, a...

Sql injection

SQL injection vulnerability in profil.php in Mafya Oyun Scrpti aka Mafia Game Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-1595

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

Without from play a modified Server remote port-vulnerability warning-the black bar safety net

Today's invasion of a US AION server, encountered some problems, write a article for everyone to see, hope you also Can learn to some knowledge. By marginalia + mention the right to succeed to get to the Server Permissions, and then the SQL command to add the USER ADMIN in the opening 3 3 8 9 The...

Hipergate v4.0.12 Multiple Vulnerabilities

Exploit for jsp platform in category web applications ========================================== Hipergate v4.0.12 Multiple Vulnerabilities ========================================== Permanent XSS: Advisory Name: Permanent Cross-Site Scripting XSS in Hipergate 4.0.12 Vulnerability Class: Permanen...

Hipergate 4.0.12 - Multiple Vulnerabilities

Permanent XSS: Advisory Name: Permanent Cross-Site Scripting XSS in Hipergate 4.0.12 Vulnerability Class: Permanent Cross-Site Scripting XSS Release Date: 2010-02-02 Affected Applications: Confirmed in Hipergate 4.0.12. Other versions may also be affected Affected Platforms: Multiple Local /...

CVE-2009-4015: Improper Neutralization of Special Elements used in an SQL Command

Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allows remote attackers to execute arbitrary commands via shell metacharacters in filename arguments...

Codice CMS 2 SQL Command Execution

--+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub banner print...

Syzygy CMS 0.3 LFI/SQL Command Injection Exploit

No description provided by source. !/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI...