171 matches found
CVE-2016-6612
An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...
Microsoft SQL Server RDBMS Engine Elevation of Privilege Vulnerability
Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in the Microsoft SQL Server RDBMS engine. An attacker can...
phpMyAdmin 4.0.10.x < 4.0.10.17 / 4.4.15.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities
Binary data 9538.prm...
DSA-3646-1 postgresql-9.4 - security update
Bulletin has no description...
The vulnerability of the MySQL database management system allows unauthorized users, after passing authentication, to affect the accessibility of data.
The vulnerability of the Oracle MySQL database management system, related to the MySQL Server component within Oracle MySQL, allows unauthorized users who have been authenticated to affect data accessibility by using the Optimizer subcomponent...
Debian Security Advisory DSA 3475-1 (postgresql-9.1 - security update)
Several vulnerabilities have been found in PostgreSQL-9.1, a SQL database system. CVE-2015-5288 Josh Kupershmidt discovered a vulnerability in the crypt function in the pgCrypto extension. Certain invalid salt arguments can cause the server to crash or to disclose a few bytes of server memory...
The vulnerability of the SAP HANA database management system allows a hacker to execute arbitrary XSJS codes.
The vulnerability of the Development Workbench component of the SAP HANA database management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary XSJS code remotely...
The vulnerability of the MySQL database management system allows attackers to compromise the accessibility of protected information.
The vulnerability of the Server sub-component, the MySQL database management system optimizer, is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the accessibility of protected information...
Metinfo File Inclusion Vulnerability
MetInfo is an enterprise website management system with PHP Mysql architecture. A file inclusion vulnerability exists in the MetInfo system. An attacker can exploit this vulnerability to execute arbitrary php code...
MemDb Multiple Remote Dos
No description provided by source. !/usr/bin/python Title: MemDb Multiple Remote Dos Products: MemCompany v1.0- Memdb Memory Database System v1.02- Memdb Online Survey Sistem v2006 Date: 28/06/2010 Author: Markot Advisory: http://www.corelan.be:8866/advisories.php?id=CORELAN-10-054 Platform:...
Esoftpro Online Contact Manager Multiple Vulnerabilities
No description provided by source. Exploit Title: Esoftpro Online Contact Manager Multiple Vulnerability Vendor url:http://www.esoftpro.com/ Version:3 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-07-4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat...
Oracle 8 File Access Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/170/info A number of security file access security vulnerabilities in suid programs that are part of Oracle may be exploited to obtain the privileges of the 'oracle' user and full access to the database system. Only the...
Oi! Email Marketing System 3.0 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16794/ Oi! Email Marketing System is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Hewlett-Packard Virtual User Generator EmulationAdmin Service Information Disclosure Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Virtual User Generator. Authentication is not required to exploit this vulnerability. The specific flaw exists within the exposed EmulationAdminSoapBinding web service. The issue lies in the...
MongoDB Detection
A document-oriented database system is listening on the remote port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65914; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/09/24"; scriptnameenglish:"MongoDB Detection";...
MongoDB Web Interface Detection
The remote web server is running the MongoDB Web Admin Interface. This interface lists information of interest to administrators of MongoDB, a document-oriented database system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65915; scriptversion"1.6";...
SQL Injection Vulnerability in Google Lab Database System
SQL Injection Vulnerability in Google Lab Database System Very Big & Critical Vulnerability detected in Google Lab System. Vendor is already reported by hackers, But they don't take positive step in this case, so finally hackers exposed the vulnerability in public by Bangladesh Cyber Army Admin -...
Auto Database System 1.0 Infusion Addon SQL injection Vulnerability
Exploit for php platform in category web applications Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection Date: 8-2-2011 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=146 Version: Auto Database System 1.0 Infusion,...
PHP-Fusion Auto Database System 1.0 Infusion SQL Injection
Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection Date: 8-2-2011 Author: Saif El-Sherei Software Link: http://php.opensourcecms.com/scripts/redirect/download.php?id=480 Version: Auto Database System 1.0 Infusion, PHP-fusion 7.01..03 Tested on: Firefox 3.0.15, , IE 8, mySQL...
Oracle MySQL 5.1.50 - Privilege Escalation
Oracle MySQL 5.1.50 - Privilege Escalation source: https://www.securityfocus.com/bid/43677/info MySQL is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to run arbitrary SQL statements with 'SUPER' privileges on the slave database system. This will allow t...