3421 matches found
FreeBSD : otrs -- Information disclosure and Data manipulation (eae8e3cf-9dfe-11e2-ac7f-001fd056c417)
The OTRS Project reports : An attacker with a valid agent login could manipulate URLs in the object linking mechanism to see titles of tickets and other objects that are not obliged to be seen. Furthermore, links to objects without permission can be placed and removed. %NASLMINLEVEL 70300 C Tenab...
On some web vulnerability principle superficial awareness-vulnerability warning-the black bar safety net
Actually always wanted to write such an article but the total there is low end in each God's eyes, perhaps into the not discernment but still decided to write out own of these experience In fact, a lot of sites the existence of vulnerabilities of the reasons there are a variety of, I can only by ...
Wordpress LeagueManager Plugin Multiple Vulnerabilities
This host is installed with Wordpress LeagueManager Plugin and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwordpressleaguemanagerpluginmultvuln.nasl 6125 2017-05-15 09:03:42Z teissa $ Wordpress LeagueManager Plugin Multiple Vulnerabilities Authors: Thanga Prakash S...
PT-2013-3194 · Oracle +1 · Mysql Server +1
Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.29 and earlier Description: The issue affects the availability of the system, allowing remote authenticated users to exploit it via unknown vectors related to Data Manipulation Language. Recommendations: For Oracle...
WP Symposium Plugin for WordPress 'symposium_groups_functions.php' 'gid' Parameter SQL Injection
The WordPress WP Symposium Plugin installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'gid' parameter of the 'symposiumgroupsfunctions.php' script. An unauthenticated, remote attacker can leverage this issue to...
WordPress Poll Plugin 'poll_id' Parameter SQL Injection
The WordPress Poll Plugin installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'pollid' parameter of the 'wp-admin/admin-ajax.php' script. An unauthenticated, remote attacker can leverage this issue to launch a...
Svlink SQL Injection Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
MySQL (Linux) - Heap Overrun (PoC)
MySQL Linux - Heap Overrun PoC MySQL Heap Overrun tested for the latest version of mysql server on a SuSE Linux system As seen below $edx and $edi are fully controlled, the current instruction is = 0x83a6b24 : mov %edx,%edi this means we landed in a place where 4 bytes can be controlled by 4 byte...
Oracle MySQL Server Multiple Vulnerabilities - 01 - (Nov 2012) - Windows
Oracle MySQL server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...
Oracle MySQL Server Multiple Vulnerabilities - 03 - (Nov 2012) - Windows
Oracle MySQL server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...
Oracle MySQL Server Multiple Vulnerabilities - 02 - (Nov 2012) - Windows
Oracle MySQL server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...
Paypal BBP #2 - Persistent Listing Web Vulnerability
Document Title: =============== Paypal BBP 2 - Persistent Listing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=634 Release Date: ============= 2012-11-25 Vulnerability Laboratory ID VL-ID: ==================================== 634...
mysql: unspecified DoS vulnerability related to DML (CPU Apr 2012)
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability, related to Server DML...
ManageEngine Security Manager Plus <= 5.5 build 5505 Multiple Vulnerabilities - Active Check
ManageEngine Security Manager Plus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple iTunes Multiple Vulnerabilities - Sep 12 (Windows)
This host is installed with Apple iTunes and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbappleitunesmultvulnsep12win.nasl 8169 2017-12-19 08:42:31Z cfischer $ Apple iTunes Multiple Vulnerabilities - Sep 12 Windows Authors: Madhuri D Copyright: Copyright c 2012 Greenbon...
MyBB 1.6.8 'announcements.php'远程SQL注入漏洞
BUGTRAQ ID: 54130 MyBB是一款流行的Web论坛程序。 MyBB 1.6.8没有正确过滤用户提供的输入即用在SQL查询中，导致攻击者利用此漏洞控制应用、访问或修改数据或利用下层数据库中的其他漏洞。 0 MyBB 1.6.8 厂商补丁： MyBB ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybboard.com/...
PayPal Starts Bug Bounty Program For Security Research
PayPal is the latest company to join the ranks of software vendors and Web properties that offer bounties to security researchers who privately disclose new bugs to them. The company isn’t saying how much it will pay for each bug, just that its security team will determine the severity of each fl...
IBM System Storage DS Storage Manager Profiler Multiple Vulnerabilities
Summary Through its extraordinary flexibility, reliability, and performance, the IBM® System Storage® series is designed to manage a broad scope of storage workloads that exist in today’s complex data center and do it effectively and efficiently. This flagship IBM disk system can bring simplicity...
NewsAdd 1.0 SQL Injection
Exploit Title: NewsAdd =1.0 Multiple SQL Injection Google Dork: ----------------------------------- Date: 2012/05/29 Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/3tCyUs1JeL1M/newsadd--mysql Version: 1.0 Tested on: Debian GNU/Linux Developer URL: http://tvaini.ueuo.com/...