5409 matches found
Oracle MySQL Server: General Component Denial of Service Vulnerability
Oracle MySQL Server is an open source relational database management system. A security vulnerability in the MySQL Server: General component allows remote attackers to conduct denial of service attacks by submitting special requests...
V5shop 在cart.aspx处的参数spikeid存在SQL注入漏洞
举例： 通过谷歌搜索inurl:productpic.aspx,因为cart.aspx是需要登录才可以正常访问，但是注入的时候毫无影响。 案例： http://www.wolifu.com/cart.aspx?act=spikebuy&spikeid=3 D:\sqlmappython sqlmap.py -u "http://www.wolifu.com/cart.aspx?act=spikebuy&spik eid=3" -p "spikeid" | | 1.0-dev-nongit-20150806 | -| . | | | .'| . | || |||||,| | || ||...
The vulnerability of the Microsoft SQL Server relational database management system allows attackers to enhance their privileges.
The vulnerability of the Microsoft SQL Server relational database management system is related to errors that occur during the operation of pointers. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...
The vulnerability of the Microsoft SQL Server relational database management system allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft SQL Server relational database management system is related to the absence of forced blocking of access to uninitialized memory areas. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted query from a remote...
用友GRP系统sql注射
简要描述： 用友GRP系统sql注射 详细说明： 用友GRP系统sql注射 链接：http://221.2.68.102:8888/R9iPortal/cm/cminfocontent.jsp?infoid=42 注射参数： Payload: infoid=-7911 UNION ALL SELECT 78,78,78,78,78,78,78,78,78,78,78,78, CHAR113+CHAR98+CHAR113+CHAR118+CHAR113+CHAR74+CHAR98+CHAR75+CHAR...
Design/Logic Flaw
IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka Spectrum Protect for Databases 5.5 before 5.5.6.2, 6.3 before 6.3.1.6, 6.4 before 6.4.1.8, and 7.1 before 7.1.4; Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server aka Spectrum Prote...
CVE-2015-7404
CVE-2015-7404 affects IBM Tivoli Storage Manager products (Databases for SQL Server, Mail for Exchange, and FlashCopy Manager) when application tracing is enabled. The root issue is that the Change TSM Password operation (changetsmpassword) writes passwords in plaintext to application trace outpu...
CVE-2015-7404
IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka Spectrum Protect for Databases 5.5 before 5.5.6.2, 6.3 before 6.3.1.6, 6.4 before 6.4.1.8, and 7.1 before 7.1.4; Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server aka Spectrum Prote...
Multiple SQL Injection Vulnerabilities in Zend Framework MsSql and SQLite
Zend Framework is a set of open source PHP5 development framework , it is mainly used to develop Web programs and services . Multiple SQL injection vulnerabilities exist in Zend Framework MsSql and SQLite, allowing remote attackers to exploit the vulnerabilities to submit specially crafted SQL...
Drupal Arbitrary SQL Command Execution Vulnerability
Drupal is an open source content management platform. Arbitrary SQL command execution vulnerability exists in Drupal 7 driver for SQL Server SQL Azure versions 7.x-1.x prior to 7.x-1.4. Allows remote attackers to execute arbitrary SQL commandsvec execute arbitrary SQL commands...
Sql injection
The escapeLike function in sqlsrv/database.inc in the Drupal 7 driver for SQL Server and SQL Azure 7.x-1.x before 7.x-1.4 does not properly escape certain characters, which allows remote attackers to execute arbitrary SQL commands via vectors involving a module using the dblike function...
CVE-2015-7876
The escapeLike function in sqlsrv/database.inc in the Drupal 7 driver for SQL Server and SQL Azure 7.x-1.x before 7.x-1.4 does not properly escape certain characters, which allows remote attackers to execute arbitrary SQL commands via vectors involving a module using the dblike function...
CVE-2015-7876
CVE-2015-7876 concerns the Drupal 7 driver for SQL Server and SQL Azure (7.x-1.x prior to 7.x-1.4). The escapeLike function in sqlsrv/database.inc does not properly escape certain characters, enabling a remote attacker to execute arbitrary SQL commands via vectors involving a module using db_like...
CVE-2015-7876
The escapeLike function in sqlsrv/database.inc in the Drupal 7 driver for SQL Server and SQL Azure 7.x-1.x before 7.x-1.4 does not properly escape certain characters, which allows remote attackers to execute arbitrary SQL commands via vectors involving a module using the dblike function...
CVE-2015-7876: Improper Neutralization of Special Elements used in an SQL Command
The escapeLike function in sqlsrv/database.inc in the Drupal 7 driver for SQL Server and SQL Azure 7.x-1.x before 7.x-1.4 does not properly escape certain characters, which allows remote attackers to execute arbitrary SQL commands via vectors involving a module using the dblike function...
PT-2015-7652
Name of the Vulnerable Software and Affected Versions Drupal 7 driver for SQL Server and SQL Azure versions prior to 7.x-1.4 Description The issue arises from the escapeLike function in sqlsrv/database.inc, which fails to properly escape certain characters. This allows remote attackers to execute...
Release Notes for Veeam Backup & Replication 8.0 Update 3
More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 8.0 Update 3 Cause Please confirm you are running version 8.0.0.807, 8.0.0.817, 8.0.0.831, 8.0.0.917, 8.0.0.2018...
ZeroNet - Decentralized websites using Bitcoin crypto and BitTorrent network
Decentralized websites using Bitcoin crypto and the BitTorrent network - http://zeronet.io Why? We believe in open, free, and uncensored network and communication. No single point of failure: Site remains online so long as at least 1 peer serving it. No hosting costs: Sites are served by visitors...
Remote execution of a PowerShell script fails when the VeeamBackup SQL database is on a remote SQL Server.
Challenge When using a PowerShell script that is intended to remotely execute a command upon the Veeam server, it may fail if the SQL instance that Veeam Backup & Replication is configured to use is on a different server. This KB article applies only if the following two statements are true. 1. A...