5667 matches found
Microsoft SQL Server SQLi NTLM Stealer
This module can be used to help capture or relay the LM/NTLM credentials of the account running the remote SQL Server service. The module will use the SQL injection from GETPATH to connect to the target SQL Server instance and execute the native "xpdirtree" or stored procedure. The stored...
Microsoft SQL Server NTLM Stealer
This module can be used to help capture or relay the LM/NTLM credentials of the account running the remote SQL Server service. The module will use the supplied credentials to connect to the target SQL Server instance and execute the native "xpdirtree" or "xpfileexist" stored procedure. The stored...
MS12-070: Vulnerability in SQL Server Could Allow Elevation of Privilege (2754849)
The remote host has a version of Microsoft SQL Server installed. This version of SQL Server is running SQL Server Reporting Services SRSS, that is affected by a cross-site scripting XSS vulnerability that could allow elevation of privileges. Successful exploitation could allow an attacker to...
MS12-070: Vulnerability in SQL Server Could Allow Elevation of Privilege (2754849) (uncredentialed check)
The remote host has a version of Microsoft SQL Server installed. This version of SQL Server is running SQL Server Reporting Services SRSS, which is affected by a cross-site scripting XSS vulnerability that could allow elevation of privileges. Successful exploitation could allow an attacker to...
Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability (2754849)
This host has important security update missing according to Microsoft Bulletin MS12-070. OpenVAS Vulnerability Test $Id: secpodms12-070.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability 2754849 Authors: Rachana Shetty Copyright: Copyright...
Microsoft SQL Server crossite scripting
SQL Server Report Manager crossite scripting...
Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability (2754849)
This host has important security update missing according to Microsoft Bulletin MS12-070. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2012-2552
Cross-site scripting XSS vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected...
Cross site scripting
Cross-site scripting XSS vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected...
CVE-2012-2552
Cross-site scripting XSS vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected...
CVE-2012-2552
Microsoft SQL Server 2000/2005/2008/2008 R2/2012 Reporting Services suffers a cross-site scripting (XSS) vulnerability in the SQL Server Report Manager, allowing an attacker to inject web script or HTML via an unspecified parameter (reflected XSS). The issue is identified as CVE-2012-2552. Public...
Microsoft SQL Server Report Manager Elevation of Privilege (MS12-070; CVE-2012-2552)
A reflected XSS vulnerability has been reported in Microsoft SQL Server Report Manager...
Microsoft SQL Server Report Manager CVE-2012-2552 Cross Site Scripting Vulnerability
Description Microsoft SQL Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Technologie...
MS12-070: Description of the security update for SQL Server 2008 Service Pack 2 GDR: October 9, 2012
None None...
MS12-070: Description of the security update for SQL Server 2008 Service Pack 3 QFE: October 9, 2012
None None...
MS12-070: Description of the security update for SQL Server 2012 GDR: October 9, 2012
None None...
MS12-070: Description of the security update for SQL Server 2005 Service Pack 4 GDR: October 9, 2012
None None...
CVE-2012-2552: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected...
PT-2012-4096
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2000 Reporting Services SP2, 2005 SP4, 2008 SP2, 2008 SP3, 2008 R2 SP1, and 2012 Description A cross-site scripting XSS issue exists in the SQL Server Report Manager, allowing remote attackers to inject arbitrary...