PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Re: PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure

sorry, i've made a mistake! only the versions = 1.0.0 are veulnerable!...

Microsoft Jet Engine - .MDB File Parsing Stack Overflow

Microsoft Jet Engine - .MDB File Parsing Stack Overflow Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: A remote code execute vulnerability exists in Microsoft Jet Engine. A remote attacker who successfully...

DEBIAN-CVE-2007-5977

Cross-site scripting XSS vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than...

docusafe-sql.txt

DocuSafe "Search" SQL Injection Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://gartha.net Google Search: intitle:Corporate Contact System insert your command in the section "search" example: 'having 1=1-- Result: MicrosoftODB...

Fedora 7 : php-pear-DB-1.7.11-1.fc7 (2007-0249)

1.7.11 : fbsql : - Fixed commit and rollback to specify the handle to be used. 1.7.10 : mysqli : - Added a type map for BIT fields. 1.7.9 : sybase : - Added divide by zero error mapping. - Added a specific quoteFloat implementation along the same lines as fbsql. - Updated tableInfo to cope with o...

Fedora 7 : iscsi-initiator-utils-6.2.0.865-0.0.fc7 (2007-0543)

This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release include two security fixes, bug fixes and new features. The tools in this release use a different db format, but the tools are able to read old and new formats. If you want to use the new...

Ubuntu 6.06 - DHCPd Remote Denial of Service

Ubuntu 6.06 DHCPd bug Remote Denial of Service Exploit Author: RoMaNSoFt Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4601.tgz 1022007-DoS-CVE-2007-5365.tgz milw0rm.com 2007-11-02...

Buffer overflow

Buffer overflow in the DB Software Laboratory VImpX VImpAX1 ActiveX control in VImpX.ocx 4.7.3.0 allows remote attackers to execute arbitrary code via a long RejectedRecordsFile parameter, a different vector than CVE-2007-2667...

CVE-2007-5445

Buffer overflow in the DB Software Laboratory VImpX VImpAX1 ActiveX control in VImpX.ocx 4.7.3.0 allows remote attackers to execute arbitrary code via a long RejectedRecordsFile parameter, a different vector than CVE-2007-2667...

IBM DB database JDBC service multiple security vulnerabilities

DB2JDS TCP/6789 format string vulnerability and multiple DoS conditions...

Cross site scripting

Cross-site scripting XSS vulnerability in Edit.asp in DB Manager 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-5291

Cross-site scripting XSS vulnerability in Edit.asp in DB Manager 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-5291

CVE-2007-5291 describes a cross-site scripting (XSS) vulnerability in the Edit.asp page of DB Manager 2.0, where an attacker can inject arbitrary script via the id parameter. The issue is classified with a NVD CVSS v2 base score of 4.3 (Medium) and primarily impacts integrity with no confidential...

mysql SECURITY INVOKER functions do not drop privileges

The mysqlchangedb function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::dbaccess privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges...

Yahoo! Messenger 8.1.0.413 - 'webcam' Remote Crash

Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2. choose "invite to view my webcam" to a contact id who is online using yahoo! messenger. 3.when the otherside accept the invatation , inject the dll to local yahoo! messenger 8.1.0.413 's process. 4 . the otherside's yaho...

CVE-2007-4550

Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB APW file...

CVE-2007-3860

Unspecified vulnerability in Oracle Application Express formerly Oracle HTML DB 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NOTE: a reliable researcher states that this is SQL injection in the wwvflowsecurity.checkdbpassword...

CVE-2007-3860

CVE-2007-3860 affects Oracle Application Express (APEX) versions 2.2.0.00.32 through 3.0.0.00.20. The vulnerability is described as an SQL injection in wwv_flow_security.check_db_password due to insufficient checks for the '"' character. The connected sources indicate this is a SQL injection vuln...

Pictures Rating (index.php msgid) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications =================================================================== Pictures Rating index.php msgid Remote SQL Injection Vulnerbility ===================================================================...