Ganesha Digital Library SQL注入漏洞

Ganesha Digital Library是一款数字图书馆程序。 由于通过"id" GET参数传递到gdl.php 当"mod"设置为"browse"，"op"设置为"comment"和传递到download.php的输入在被用于SQL查询前未能正确过滤，攻击者可以利用漏洞通过注入任意SQL代码操纵SQL查询。 0 Ganesha Digital Library 4.2 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://kmrg.itb.ac.id/ SQL Injection vulnerability...

Oracle Demantra 12.2.1 - SQL Injection Vulnerability

Exploit for windows platform in category web applications Details: Application is vulnerable to SQL injection. Impact: An attacker with access to the vulnerable pages could manipulate the queries being sent to the database, potentially enabling them to: - Extract sensitive information, including...

Oracle Demantra 12.2.1 - SQL Injection

Details: Application is vulnerable to SQL injection. Impact: An attacker with access to the vulnerable pages could manipulate the queries being sent to the database, potentially enabling them to: - Extract sensitive information, including but not limited to authentication credentials and personal...

Oracle Demantra 12.2.1 - SQL Injection

Oracle Demantra 12.2.1 - SQL Injection Details: Application is vulnerable to SQL injection. Impact: An attacker with access to the vulnerable pages could manipulate the queries being sent to the database, potentially enabling them to: - Extract sensitive information, including but not limited to...

GDL 4.2 - Multiple Vulnerabilities

GDL 4.2 - Multiple Vulnerabilities - Title : GDL 4.2 Multiple Vulnerabilities - Down. Script : http://kmrg.itb.ac.id/ - http://kmrg.itb.ac.id/gdl42.zip - Author : ByEge - Home : http://byege.blogspot.com.tr/ - Tested : Apache/2.2.22 Win32 PHP/5.4.3 - Date : 26/02/2014 - Google Dork : "Powered by...

ThinkSAAS SQL注入漏洞打包1-5

简要描述： 漏洞很多，一个一个提交太麻烦了，一起提交吧，希望能走个大厂商 详细说明： 第一处SQL注入 /app/group/action/do.php //编辑小组基本信息 case "editbase": $groupname = t$POST'groupname'; $groupdesc = tsClean$POST'groupdesc'; if$groupname=='' || $groupdesc=='' tsNotice"小组名称和介绍都不能为空！"; //过滤内容开始 aac'system'-antiWord$groupname;...

MGASA-2014-0078 Updated maradns package fixes security vulnerabilities

This update fixes a possible blind spoof attack vulnerability and a possible denial of service DoS vulnerability...

Updated maradns package fixes security vulnerabilities

This update fixes a possible blind spoof attack vulnerability and a possible denial of service DoS vulnerability...

PT-2014-9120

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue concerns a possible blind spoof attack and a possible denial of service DoS vulnerability. Recommendations At the moment, there is no information about a newer version that...

Tableau Server 8.0.7 8.1.2 - Blind SQL Injection

Tableau Server 8.0.7 8.1.2 - Blind SQL Injection Trustwave's SpiderLabs Security Advisory TWSL2014-003: Blind SQL Injection Vulnerability in Tableau Server Published: 02/07/14 Version: 1.1 Vendor: Tableau Software http://www.tableausoftware.com Product: Tableau Server Versions affected: 8.1.X...

TCCMS SQL injection vulnerability(blind)-vulnerability warning-the black bar safety net

\app\controller\area. class. php is not the id of the process, there is injected into the public function getCitys $aeraObj = M"area"; $provinceId = $GET"id"; //do not perform any processing //Fix suggested$provinceId = intval$GET"id"; mandatory conversion return...

Tableau Server - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Blind SQL Injection Vulnerability in Tableau Server Published: 02/07/14 Version: 1.1 Vendor: Tableau Software http://www.tableausoftware.com Product: Tableau Server Versions affected: 8.1.X before 8.1.2 and 8.0.X before 8.0.7. Not present in...

Tableau Server < 8.0.7 / < 8.1.2 - Blind SQL Injection

Trustwave's SpiderLabs Security Advisory TWSL2014-003: Blind SQL Injection Vulnerability in Tableau Server Published: 02/07/14 Version: 1.1 Vendor: Tableau Software http://www.tableausoftware.com Product: Tableau Server Versions affected: 8.1.X before 8.1.2 and 8.0.X before 8.0.7. Not present in...

Automated NoSQL Database Injection Attacks: NoSQLMap

NoSQLMap is an open source Python tool designed to audit for as well as automate injection attacks and exploit default configuration weaknesses in NoSQL databases as well as web applications using NoSQL in order to disclose data from the database. It is named as a tribute to Bernardo Damele and...

Pizza Inn Project SQL Injection

Exploit: PizzaInnProject - SQL Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/restaurantmis/ 1 Sql Injection Time Based Blind PoC: http://127.0.0.1/reserve-exec.php?id=1' SQL Injection Vulnerable Code: +...

godontologico 5 SQL Injection

Exploit: 0day godontologico v5 - SQL Inject + Author: vinicius777 + Contact: vinicius777 AT gmail - @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/godontologico/ + Google D0rks: "Smile Odonto - Enhancing your smile - www.smileodonto.com.br" + Google D0rks: "Smile Odonto ® -...

PizzaInn_Project SQL注入漏洞

No description provided by source. 1 Sql Injection Time Based Blind PoC: http://127.0.0.1/reserve-exec.php?id=1' SQL Injection Vulnerable Code: + reserve-exec.php $id = $GET'id'; $qry = "INSERT INTO reservationsdetailsmemberid,tableid,partyhallid,ReserveDate,ReserveTime,tableflag,partyhallflag...

godontologico 5 SQL注入漏洞

No description provided by source. 1 Sql Injection POST Time Based Blind Note: Time based Injection on POST requests as indicated on the output. You might use sqlmap -l to load it though. Admin hashes under Table ‘funcionarios' on column ‘senha'. PoC: POST /gco/wallpapers/indexajax.php HTTP/1.1...

Cells Blog 3.3 Cross Site Scripting / SQL Injection

Exploit: Cells v3.3 XSS Reflected & Blind SQLite Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + version: Cells Blog 3.3 + Vendor Homepage: http://cells.tw + 14/01/2014 vendor contacted + 17/01/2014 no response from vendor + 20/01/2014 no response from vendor +...

Easy POS System SQL注入漏洞

No description provided by source. 1 Sql Injection POST Time Based Blind Note: Time based Injection on POST requests using burp, as output indicated. You might use ‘sqlmap -l’ to load it though. PoC: POST /login.php HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux i686; rv:22.0...