429 matches found
RitsBlog 0.4.2 (AB/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ======================================================= RitsBlog 0.4.2 AB/XSS Multiple Remote Vulnerabilities ======================================================= Salvatore "drosophila" Fresta + Application: RitsBlog + Version: 0.4.2 +...
Ab Board (id) Remote SQL Injection Vulnerability
No description provided by source. || | | Ad Board trr.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...
MySQL Alter表函数信息泄露漏洞
MySQL是一款开放源代码的数据库程序。 MySQL不正确执行针对Alter表函数的访问控制，远程攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 MySQL AB MySQL 5.1.17 MySQL AB MySQL 5.1.16 MySQL AB MySQL 5.1.15 MySQL AB MySQL 5.1.14 MySQL AB MySQL 5.1.13 MySQL AB MySQL 5.1.12 MySQL AB MySQL 5.1.11 MySQL AB MySQL 5.1.10 MySQL AB MySQL 5.1.9 MySQL AB MySQL 5.1.6...
MySQL特权提升和安全绕过漏洞
MySQL是一款开放源代码的数据库程序。 MySQL存在特权提升和安全绕过问题，远程攻击者可以利用漏洞以高特权执行任意命令并绕过限制建立新的数据库。 验证用户可以通过如下方法建立新的数据： $ mysql -u root -p -S /path/to/socket Enter password: mysql create database 'sample'; mysql grant all on sample. to 'sample'@'%' identified by 'password'; mysql \q $ mysql -h my.mysql.server -u sample -...
MySQL AB Eventum 1.x - 'list.php?release' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...
MySQL AB Eventum 1.x - 'get_jsrs_data.php?F' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...
XML-RPC for PHP Remote Code Injection Vulnerability
Description XML-RPC for PHP is affected by a remote code-injection vulnerability. An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks, including unauthorized remote access. XML-RPC for PHP 1.1 and prior...
Apache Httpd < 1.3.27 : Buffer overflows in ab utility
Buffer overflows in the benchmarking utility ab could be exploited if ab is run against a malicious server...
pico Text Editor Symbolic Link Vulnerability : ERROR CORRECTION
The previous submission stated that the vendor of pico is Washington University. This was an error. Of course it sould said University of Washington. The vendor we've for the vulnerability contacted was University of Washington. Below is the correct message. -----BEGIN PGP SIGNED MESSAGE----- Has...