CVE-2023-27859

IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple databases. A user could exploit this by installing a malicious jar file that overwrites the existing like named jar file in another database. IBM X-Force ID:...

SUSE CVE-2019-13057

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...

CVE-2021-29678

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or modify files. IBM X-Force ID: 199914...

UBUNTU-CVE-2019-13057

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...

逐浪官网演示站sql注入漏洞（可跨库）

简要描述： 如题 详细说明： 63个数据库 未查看数据的性质 URL： http://demo.zoomla.cn/Plugins/Doc.aspx?id=1 GET 字符过来不严格导致注入漏洞 漏洞证明： current user: 'demozoomlaf'...

用友网站SQL Injection

简要描述： 某二级站存在注入，可报错，可跨库。 详细说明： dbo权限 漏洞证明： 报错注入：...

DVBBS7. 1 SQL Edition cross-database vulnerability-vulnerability warning-the black bar safety net

Author: Gui brother article source: www.54nb.cn Vulnerability test environment:DVBBS7. 1 SQL Affected files admin/admin. asp ..... Exploit select @@version0 to obtain the Windows version number and username='dbo' determine the current system user is not sa select username0 proof the current syste...