5030 matches found
Oracle DB SQL Injection via SYS.LT.MERGEWORKSPACE
This module exploits a sql injection flaw in the MERGEWORKSPACE procedure of the PL/SQL package SYS.LT. Any user with execute privilege on the vulnerable package can exploit this vulnerability. This module requires Metasploit: https://metasploit.com/download Current source:...
Oracle DB SQL Injection via SYS.DBMS_METADATA.OPEN
This module will escalate a Oracle DB user to DBA by exploiting an sql injection bug in the SYS.DBMSMETADATA.OPEN package/function. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle DB SQL...
From the webshell to sniff for linux-vulnerability warning-the black bar safety net
Special thanks to the bridge brother! Long time no get too, and forgot how to in the linux below to sniff. Get a webshell is a linux machine and want to try sniffing him within the network of the database server. So with this article! First with backshell bounce a SHELL to the local. 我 用 的 是 xi4o...
CVE-2009-3714
creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9205...
dB Masters MultiMedias Content Manager 4.5 - SQL Injection
dB Masters MultiMedias Content Manager 4.5 - SQL Injection =========================================================================================== o dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability Software : dB Masters Multimedia's Content Manager version 4.5 Vendor :...
dB Masters MultiMedia's Content Manager 4.5 - SQL Injection
=========================================================================================== o dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability Software : dB Masters Multimedia's Content Manager version 4.5 Vendor : http://www.dbmasters.net/ Author : NoGe Contact :...
dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability
No description provided by source. =========================================================================================== o dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability Software : dB Masters Multimedia's Content Manager version 4.5 Vendor : http://www.dbmasters.net...
MySQL 5.0.45 - (Authenticated) COM_CREATE_DB Format String (PoC)
MySQL tested: Version 5.0.45 on CentOS Linux Format String Vulnerability MySQL General Available GA Release is vulnerable. Latest MySQL Version is not vulnerable since the bug if ifdef'ed off. from mysql-5.0.75 source mysql-5.0.75.tar.gz in the file libmysqld/sqlparse.cc this source code is also...
MySQL <= 5.0.45 COM_CREATE_DB Format String PoC (auth)
Exploit for multiple platform in category dos / poc ====================================================== MySQL = 4.0.0 are affected. function prototype: writeTHD thd, enumenumservercommand command, const char format, ... function call: writethd, command, packet; on line 2084: case COMCREATEDB: ...
Big Sister File Exchange Server 0.03 Disclosure
Application Name : Big Sister File Exchange Server 0.03 Vulnerable Type : Arbitrary Db Config Download Vulnerability Infection : SQL Info Get... Author : Septemb0x Script Down.& WebSite : http://sourceforge.net/projects/bigsifes/files/bigsifes/bigsifes-0.03.tgz EXPLOIT : http://target/path/config...
JNM Solutions DB Top Sites 1.0 - 'vote.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/43699/info JNM Solutions DB Top Sites is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...
CVE-2009-2110
Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...
Directory traversal
Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...
Code injection
Static code injection vulnerability in addreg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted 1 url and 2 location parameter...
CVE-2009-2110
Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...
CVE-2009-2110
Affected software: DB Top Sites 1.0. Vulnerability type: directory traversal leading to local file inclusion/execution via the u parameter in full.php, index.php, and contact.php when magic_quotes_gpc is disabled. Root cause: directory traversal with .. in the parameter. Impact: remote attackers ...
CVE-2009-2111
CVE-2009-2111 affects DB Top Sites 1.0, with a vulnerability in the file add_reg.php that allows static code injection . A remote attacker can inject arbitrary PHP code by supplying crafted parameters for the (1) url and (2) location, enabling code execution on the affected system. This is docume...
DB Top Sites 1.0 - index.php?u Local File Inclusion
DB Top Sites 1.0 - index.php?u Local File Inclusion + DB Top Sites v1.0 index.php u Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + Local File Inclusion - Vulnerable code is everywhere...
DB Top Sites 1.0 (index.php u) Local File Inclusion Vulnerability
No description provided by source. + DB Top Sites v1.0 index.php u Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + Local File Inclusion - Vulnerable code is everywhere...