Unspecified Vulnerability in Oracle Fusion Middleware WebLogic Server Component (CNVD-2015-02590)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the WLS-WebServices subcomponent of the Oracle WebLogic Server component of Oracle Fusion Middleware, which can be exploited by remote attackers to manipulate data...

Oracle PeopleSoft Product PeopleSoft Enterprise PeopleTools Component Unspecified Vulnerability

Oracle PeopleSoft is a suite of enterprise human capital management solutions.PeopleSoft Enterprise PeopleTools is a tool and technology platform component that transforms the way organizations manage, use, and maintain PeopleSoft software. A security vulnerability exists in the PORTAL subcompone...

Unspecified Vulnerability in Oracle PeopleSoft Product PeopleSoft Enterprise PeopleTools Component (CNVD-2015-02604)

Oracle PeopleSoft is a suite of enterprise human capital management solutions, and PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that transforms the way organizations manage, use and maintain their PeopleSoft software. An unspecified security vulnerabili...

Unspecified Vulnerability in PeopleSoft Enterprise SCM Strategic Sourcing Component in Oracle PeopleSoft

Oracle PeopleSoft is a suite of enterprise human capital management solutions, and PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that transforms the way organizations manage, use and maintain their PeopleSoft software. An unspecified security vulnerabili...

CVE-2015-0433

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML...

mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU Jan 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML...

WordPress MiwoFTP Plugin 1.0.5 CSRF Arbitrary File Deletion Exploit

Summary MiwoFTP is a smart, fast and lightweight file manager plugin that operates from the back-end of WordPress. Description Input passed to the 'selitems' parameter is not properly sanitised before being used to delete files. This can be exploited to delete files with the permissions of the we...

Comalatech Comala Workflows 4.6.1 CSRF / XSS Vulnerabilities

Comalatech Comala Workflows versions 4.6.1 and below suffer from cross site request forgery and cross site scripting vulnerabilities. title: Multiple XSS & XSRF vulnerabilities product: Comalatech Comala Workflows vulnerable version: = 4.6.1 fixed version: 4.6.2 for Confluence 5.4+ and 4.5.4 for...

Balero CMS v0.7.2 Multiple Blind SQL Injection Vulnerabilities

Summary Balero CMS is an open source project that can help you manage the page of your company with just a few guided steps, minimizing the costs that many companies make to have your advertising medium and/or portal. Description The application suffers from multiple blind SQL injection...

6kbbs 8.0 SQL Injection

6kbbs v8.0 SQL Injection Security Vulnerabilities Exploit Title: 6kbbs Multiple SQL Injection Security Vulnerabilities Vendor: 6kbbs Product: 6kbbs Vulnerable Versions: v7.1 v8.0 Tested Version: v7.1 v8.0 Advisory Publication: April 01, 2015 Latest Update: April 01, 2015 Vulnerability Type:...

SoftBB 'post' Parameter Multiple Vulnerabilities

SoftBB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress WPML Plugin < 3.1.9.1 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

OpenEMR 'validateUser.php' SQLi Vulnerability - Active Check

OpenEMR is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr";...

PHPB2B网站管理系统SQL注入#2(无视防注入)

简要描述： SQL注入2 详细说明： 注入链接：/virtual-office/brand.php 注入参数：databrand 漏洞代码：（第24行开始） if isset$POST'save' && !empty$companyid $company-newCheckStatus$companyinfo'status'; if!empty$POST'data''brand' $vals = $POST'data''brand'; ifisset$POST'id' $id = intval$POST'id'; $attachment-renamefile =...

PT-2015-1114 · Oracle +6 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.41 and earlier Oracle MySQL Server versions 5.6.22 and earlier Description: The issue allows remote authenticated users to affect availability via vectors related to InnoDB : DML. This means that an...

xdcms网上订餐系统 sql注入 #2

简要描述： rt 详细说明： 1 对于修改资料时，post的数组的key做了些过滤。 可是我们还是能 非法修改一些重要字段的。例如 http://demo.xdcms.cn/index.php?m=member&f=editsave post fields%5Bthumb%5D=1&fields%5Bmoney%5D=99999&fields%5Bsex%5D=%E7%94%B7&fields%5Bemail%5D=333333%40333.com&fields%5Baddress%5D=1&gourl= 无限充值了。 2 同样是post的数组的key的过滤问题。 少过滤了一处。 注册处...

Oracle MySQL Multiple Unspecified vulnerabilities-03 (Feb 2015) - Windows

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...

Oracle MySQL Multiple Unspecified vulnerabilities-02 (Feb 2015) - Windows

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle MySQL Multiple Unspecified vulnerabilities-04 (Feb 2015) - Windows

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE JRE Unspecified Vulnerability-02 (Feb 2015) - Windows

Oracle Java SE JRE is prone to some unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...