UBUNTU-CVE-2019-13057

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...

逐浪官网演示站sql注入漏洞（可跨库）

简要描述： 如题 详细说明： 63个数据库 未查看数据的性质 URL： http://demo.zoomla.cn/Plugins/Doc.aspx?id=1 GET 字符过来不严格导致注入漏洞 漏洞证明： current user: 'demozoomlaf'...

用友网站SQL Injection

简要描述： 某二级站存在注入，可报错，可跨库。 详细说明： dbo权限 漏洞证明： 报错注入：...

DVBBS7. 1 SQL Edition cross-database vulnerability-vulnerability warning-the black bar safety net

Author: Gui brother article source: www.54nb.cn Vulnerability test environment:DVBBS7. 1 SQL Affected files admin/admin. asp ..... Exploit select @@version0 to obtain the Windows version number and username='dbo' determine the current system user is not sa select username0 proof the current syste...