7 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the 1 dbserver, 2 host, 3 user, 4 password, 5 database, and 6 table parameters. NOTE: the provenance of this information is unknown; the details are...
CVE-2008-4450
Cross-site scripting XSS vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the 1 dbserver, 2 host, 3 user, 4 password, 5 database, and 6 table parameters. NOTE: the provenance of this information is unknown; the details are...
CVE-2008-4450
CVE-2008-4450 affects XAMPP for Windows 1.6.8, where a Cross-site Scripting (XSS) vulnerability exists in adodb.php. The issue allows remote attackers to inject arbitrary web script or HTML via the following parameters: dbserver, host, user, password, database, and table. The root cause and exact...
Buffer overflow
The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted input for the database server hostname, which allows remote attackers to trigger a library buffer overflow and execute arbitrary code via a long host parameter, or have other unspecified...
CVE-2007-2079
The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted input for the database server hostname, which allows remote attackers to trigger a library buffer overflow and execute arbitrary code via a long host parameter, or have other unspecified...
XAMPP adodb.php mssql_connect Function Overflow
Binary data 3967.prm...
XAMPP for Windows 1.6.0a - mssql_connect() Remote Buffer Overflow
XAMPP for Windows 1.6.0a - mssqlconnect Remote Buffer Overflow Connect$POST'host', $POST'user', $POST'password', $POST'database'; echo "DBServer: $POSTdbserver"; $result = $db-Execute"SELECT FROM $POSTtable"; ... mssqlconnect function is vulnerable to buffer overflow and the host argument is...