IBM Informix Dynamic Server DBINFO关键字远程栈溢出漏洞

BUGTRAQ ID: 44190 IBM Informix Dynamic Server为企业提供运行业务所需的任务关键型数据基础设施。 Informix Dynamic Server没有正确地处理用户在SQL查询中提交给DBINFO关键词的参数，远程攻击者可以通过提交恶意查询请求触发栈溢出，导致以数据库服务器的权限执行任意代码。 IBM Informix Dynamic Server 11.50.xC3 IBM Informix Dynamic Server 11.10.xC3 IBM Informix Dynamic Server 10.00.xC10 厂商补丁： IBM ---...

phpCheckZ 1.1.0 Blind SQL Injection

phpCheckZ 1.1.0 Blind SQL Injection Vulnerability Name phpCheckZ Vendor http://www.phpcheckz.com Versions Affected 1.1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-19 X. INDEX I. ABOUT THE APPLICATION II...

phpCheckZ 1.1.0 - Blind SQL Injection

phpCheckZ 1.1.0 - Blind SQL Injection phpCheckZ 1.1.0 Blind SQL Injection Vulnerability Name phpCheckZ Vendor http://www.phpcheckz.com Versions Affected 1.1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-19 X...

IBM Informix Dynamic Server DBINFO Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Informix Database Server. SQL query execution privileges are required to exploit this vulnerability. The specific flaw exists when processing the arguments to the DBINFO keyword in a SQL query...

Particle Wiki Index.PHP SQL Injection Vulnerability

Particle Wiki is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user- supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit...

ASP Nuke SQL Injection Vulnerability

Exploit for asp platform in category web applications ==================================== ASP Nuke SQL Injection Vulnerability ==================================== Title : ASP Nuke Sql Injection Vulnerability Affected Version : AspNuke 0.80 Discovery : www.abysssec.com Vendor :...

ASP Nuke - SQL Injection

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | 0 " & "AND art.Archive = 0" Considering t...

Nagios XI < 2009R1.3 multiple vulnerabilities

Nagios XI is prone to multiple vulnerabilities. 1. Nagios XI is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

TTVideo 1.0 Joomla Component SQL Injection Vulnerability

TTVideo 1.0 Joomla Component SQL Injection Vulnerability Name TTVideo Vendor http://www.toughtomato.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-27 X. INDEX I. ABOUT THE APPLICATION II...

Group Office - 'comment_id' SQL Injection

Title Group Office Remote SQL Injection Vulnerability Author ADEO Security Published 17/07/2010 Version 3.5.9 Possible all versions Vendor http://www.group-office.com Download http://sourceforge.net/projects/group-office/files/3.5/groupoffice-com-3.5.9.tar.gz/download Description "Take your offic...

TaskFreak! < 0.6.4 Multiple Vulnerabilities

TaskFreak! is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

iscripts Socialware 2.2.x - Multiple Vulnerabilities

iscripts Socialware 2.2.x - Multiple Vulnerabilities /iScripts SocialWare 2.2.x Multiple Remote Vulnerability Name iScripts SocialWare Vendor http://www.iscripts.com Versions Affected 2.2.x Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at...

iScripts CyberMatch 1.0 Remote Blind SQL Injection

iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability Name iScripts CyberMatch Vendor http://www.iscripts.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-02-07 X. INDEX I. ABOUT THE...

iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability ========================================================= iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability Name iScrip...

V-EVA Classified Script 5.1 - classified_img.php SQL Injection

V-EVA Classified Script 5.1 - classifiedimg.php SQL Injection source: https://www.securityfocus.com/bid/41204/info V-EVA Classified Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

eBay Clone Script 2010 - showcategory.php SQL Injection

eBay Clone Script 2010 - showcategory.php SQL Injection source: https://www.securityfocus.com/bid/41200/info eBay Clone Script 2010 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

KubeSupport - lang SQL Injection

KubeSupport - lang SQL Injection source: https://www.securityfocus.com/bid/40970/info KubeSupport is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

cyberhost - default.asp SQL Injection

cyberhost - default.asp SQL Injection source: https://www.securityfocus.com/bid/40357/info cyberhost is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Your Articles Directory - Login Option SQL Injection

Your Articles Directory - Login Option SQL Injection source: https://www.securityfocus.com/bid/39796/info Article Directory Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Joomla ABC Component &quot;sectionid&quot; SQL Injection Vulnerability

No description provided by source. A vulnerability has been discovered in the ABC component for Joomla, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the "sectionid" parameter to index.php when "option" is set to "comabc" is not properly sanitised...