PT-2017-14335

Name of the Vulnerable Software and Affected Versions US Zip Codes Database Script version 1.0 Description The issue allows SQL Injection via the state parameter. Recommendations For version 1.0, avoid using the state parameter in the affected API endpoint until the issue is resolved. Restrict...

CVE-2012-3441

The database creation script module/idoutils/db/scripts/createmysqldb.sh in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors...

CVE-2010-4329

Cross-site scripting XSS vulnerability in the PMAlinkOrButton function in libraries/common.lib.php in the database db search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 allows remote attackers to inject arbitrary web script or HTML via a crafted request...