326 matches found
SUSE-SU-2019:2521-1 Security update for SUSE Manager Server 3.2
This update fixes the following issues: cobbler: - Jinja2 template library fix bsc1141661 pgjdbc-ng: - Allow dots in database name bsc1146416 py26-compat-salt: - Get tornado dependency from the system on SLE12 bsc1149409 - Catch SSLError for TLS 1.2 bootstraps with RES/RHEL6 and SLE11 bsc1147126...
Denial Of Service (DoS)
firebird db is vulnerable to denial of service. A buffer overflow in the ibserver allows a remote attacker to crash the application via a malicious gsec command containing a long database name...
Odoo Input Validation Error Vulnerability (CNVD-2019-30574)
Odoo is an open source commercial system from the Belgian company Odoo. An input validation error vulnerability exists in the dbfilter routing component of Odoo Community 11.0 and earlier versions Enterprise and Community, which arises from the program failing to properly filter host headers and...
DEBIAN-CVE-2019-11768
An issue was discovered in phpMyAdmin before 4.9.0.1. A vulnerability was reported where a specially crafted database name can be used to trigger an SQL injection attack through the designer feature...
UBUNTU-CVE-2019-11768
An issue was discovered in phpMyAdmin before 4.9.0.1. A vulnerability was reported where a specially crafted database name can be used to trigger an SQL injection attack through the designer feature...
CVE-2019-11768: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in phpMyAdmin before 4.9.0.1. A vulnerability was reported where a specially crafted database name can be used to trigger an SQL injection attack through the designer feature...
CVE-2019-7547
An issue was discovered in SIDU 6.0. Because the database name is not strictly filtered, the attacker can insert a name containing an XSS Payload, leading to stored XSS...
CVE-2019-7547
An issue was discovered in SIDU 6.0. Because the database name is not strictly filtered, the attacker can insert a name containing an XSS Payload, leading to stored XSS...
CVE-2019-7547: Improper Neutralization of Input During Web Page Generation
An issue was discovered in SIDU 6.0. Because the database name is not strictly filtered, the attacker can insert a name containing an XSS Payload, leading to stored XSS...
Frog CMS 0.9.5 - Cross-Site Scripting
Frog CMS 0.9.5 - Cross-Site Scripting Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Date: 2018-12-25 Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under...
Frog CMS 0.9.5 Cross Site Scripting
Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Date: 2018-12-25 Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under /install/index.php is that the Database name...
Frog CMS 0.9.5 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-26649)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5, which can be exploited by remote...
Design/Logic Flaw
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 contains a reflected XSS vulnerability: the Database name field sent to /install/index.php is reflected back to the user. This is documented across multiple connected sources (e.g., Exploit-DB entry 46067, 0day.today exploit description, PacketStorm listing). Exploitation details a...