CVE-2017-2810

CVE-2017-2810 affects Tablib 0.11.4, where Databook loading via YAML can execute arbitrary Python commands, enabling remote code execution. Public descriptions reference exploitation by inserting Python into loaded YAML, resulting in command execution with the process’s privileges. Connected advi...

CVE-2017-2810

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability...

CVE-2017-2810

It was found that loading a yaml format Databook from an untrusted source could lead to arbitrary code execution in python-tablib as the safeload method was not used to load the content...

CVE-2017-2810: Undefined Security Weakness

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability...

Tablib Yaml Load Code Execution Vulnerability

Summary An exploitable vulnerability exists in the Databook loading functionality of Tablib. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability. Tested Versions Tablib v0.11.4...

My Databook diary.php delete Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/24311/info My DataBook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication...

My Databook diary.php year Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/24311/info My DataBook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication...

Cross site scripting

Cross-site scripting XSS vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the year parameter...

CVE-2007-3064

Cross-site scripting XSS vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the year parameter...

CVE-2007-3063

SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter...

Sql injection

SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter...

CVE-2007-3064

Cross-site scripting XSS vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the year parameter...

CVE-2007-3063

CVE-2007-3063 is an SQL injection vulnerability in diary.php of the application My Databook . The flaw allows remote attackers to send a crafted value in the delete parameter to execute arbitrary SQL commands, exposing data and potentially compromising integrity/availability. Documents confirm th...

CVE-2007-3063

SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter...

CVE-2007-3064

CVE-2007-3064 affects My Databook’s diary.php with a stored/reflected XSS via the year parameter. Multiple sources (NVD, CVE listings, PRION/CVELIST) confirm the impact as arbitrary script execution by remote attackers; no concrete remediation or fixed version is stated in the provided documents....

CVE-2007-3064: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the year parameter...

CVE-2007-3063: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter...

My Databook - diary.php?delete SQL Injection

My Databook - diary.php?delete SQL Injection source: https://www.securityfocus.com/bid/24311/info My DataBook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based...

My Databook - diary.php?year Cross-Site Scripting

My Databook - diary.php?year Cross-Site Scripting source: https://www.securityfocus.com/bid/24311/info My DataBook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based...

My Databook - 'diary.php?year' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24311/info My DataBook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the...