USN-3390-1: PostgreSQL vulnerabilities

Ben de Graaff, Jelte Fennema, and Jeroen van der Ham discovered that PostgreSQL allowed the use of empty passwords in some authentication methods, contrary to expected behaviour. A remote attacker could use an empty password to authenticate to servers that were believed to have password login...

DVD Rental Software - SQL Injection

DVD Rental Software - SQL Injection Exploit Title: DVD Rental Software SQL injection Vulnerability Date: 19/11/2010 Author: JaMbA Team: SwT Script url: http://www.commodityrentals.com/dvd.php Version: N/A Tested on: Demo CVE : EXPL0!T...