6 matches found
EUVD-2017-18718
Malware in sbrugna...
CVE-2020-16858
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
PT-2019-1789 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site-scripting XSS issue exists due to improper sanitization of specially crafted web requests. An authenticated attacker could exploit this by sending a special...
CVE-2017-9792
In Apache Impala incubating before 2.10.0, a malicious user with "ALTER" permissions on an Impala table can access any other Kudu table data by altering the table properties to make it "external" and then changing the underlying table mapping to point to other Kudu tables. This violates and works...
MySQL <= 5.0.45 (Alter) Denial of Service Vulnerability
No description provided by source. / MySQL =6.0 possibly affected Kristian Erik Hermansen Credit: Joe Gallo You must have ALTER permissions to exploit this bug! Scenario: You found SQL injection, but you want to punch backend server in the nuts just for fun. Start with the ALTER TABLE statement o...
MySQL 5.0.45 - 'Alter' Denial of Service
/ MySQL mysql CREATE TABLE test id int10 unsigned NOT NULL AUTOINCREMENT PRIMARY KEY, foo text NOT NULL ENGINE=InnoDB DEFAULT CHARSET=latin1; Query OK, 0 rows affected mysql SELECT FROM test WHERE CONTAINSfoo, 'bar'; Empty set mysql ALTER TABLE test ADD INDEX foo100; Query OK, 0 rows affected...