Exploit for SQL Injection in Oretnom23 Human_Resource_Management_System

Human Resource Management System Project in PHP and MySQL Free...

CVE-2024-20929

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: DB Privileges. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applicati...

PT-2024-13248 · Opentext · Opentext Appbuilder

Name of the Vulnerable Software and Affected Versions: OpenText AppBuilder versions 21.2 through 23.2 Description: The issue is related to improper input validation, allowing an authenticated user with database creation or management privileges to exploit the AppBuilder server. This exploitation...

postgresql: extension script @substitutions@ within quoting allow SQL injection

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct dollar quoting, '', or "". If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with...

USN-6366-1 postgresql-9.5 vulnerability

It was discovered that PostgreSQL incorrectly handled certain extension script substitutions. An attacker having database-level CREATE privileges can use this issue to execute arbitrary code as the bootstrap superuser...

Vulnerability of the Server component: Security: Privileges of the MySQL database management system, which allows attackers to compromise data integrity.

Vulnerability of Component Server: Security: The privileges of the MySQL database management system are related to errors in processing input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

CVE-2023-2454

schemaelement defeats protective searchpath changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code...

CVE-2023-2454

schemaelement defeats protective searchpath changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code...

SUSE CVE-2007-5976

SQL injection vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to execute arbitrary SQL commands via the db parameter...

Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, which allows attackers to disclose sensitive information.

The vulnerability of the MySQL Server component lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to disclose sensitive information that is protected by the system...

CVE-2022-26856

Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable...

CVE-2022-0981

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...

CVE-2021-46089

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges...

CVE-2021-3515

A shell injection flaw was found in pglogical, logical replication extension for PostgreSQL. An attacker with CREATEDB privileges on a PostgreSQL server can craft a database name that allows execution of shell commands as the postgresql user when calling pglogical.createsubscription...

Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the MySQL Server component relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

SUSE-SU-2020:14353-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights bsc1143194. - CVE-2019-13057: Fixed an issue with improper authorization with delegated database admin...

Privilege Escalation

MySQL is vulnerable to Privilege Escalation. A flaw was discovered in the mysqlchangedb function when returning from SQL SECURITY INVOKER stored routines. An authenticated user could use this flaw to gain database privileges...

SQL Injection Vulnerability in Eight Image Encryption Platforms

Eight Image Encryption Platform is designed and developed in php+mysql environment by calling the API of Eight Image Platform. There is a SQL injection vulnerability in Eight Image Encryption Platform, which can be exploited by attackers to gain database privileges...

SQL Injection Vulnerability in xyhCMS of Kunming Yuntao Technology Co.

Kunming Yuntao Technology Co. xyhCMS is a completely open source set of CMS content management system, simple, easy to use, secure, stable, free. Kunming Yuntao Technology Co. xyhCMS SQL injection vulnerability, attackers can exploit the vulnerability to obtain database privileges...

SQL Injection Vulnerability in xyhCMS of Kunming Yuntao Technology Co. Ltd (CNVD-2020-22707)

XYHCMS is a completely open source CMS content management system, simple, easy to use, secure, stable and free. Kunming Yuntao Technology Co. xyhCMS SQL injection vulnerability, attackers can exploit the vulnerability to obtain database privileges...