VCD-db 0.9x Search Module - 'batch' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15840/info VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

VCD-db 0.9x Search Module - batch Cross-Site Scripting

VCD-db 0.9x Search Module - batch Cross-Site Scripting source: https://www.securityfocus.com/bid/15840/info VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these...

Replace the small bamboo of the NBSI2: the Opendatasource And Openrowset-vulnerability warning-the black bar safety net

Currently on the market of SQL Injection tools a lot, the most respected is the NBSI2. SQL Injection method on the Internet is everywhere, everyone serious to learn it will soon become the script of the invasion“master”it. But whether it is tools, or numerous methods, to guess the SQL data when t...

CVE-2005-3696

SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action view.php to index.php...

CVE-2005-3696

SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action view.php to index.php...

CVE-2005-3696

CVE-2005-3696 affects Arki-DB 1.0 and 2.0. A SQL injection exists in the catid parameter used in the view action (view.php) passed to index.php, enabling remote attackers to manipulate the database. The NVD notes a base score of 7.5 (HIGH) with network access and low complexity. Affected versions...

CVE-2005-3696: Undefined Security Weakness

SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action view.php to index.php...

[SA17627] Arki-DB "catid" SQL Injection Vulnerability

TITLE: Arki-DB "catid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA17627 VERIFY ADVISORY: http://secunia.com/advisories/17627/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Arki-DB 1.x http://secunia.com/product/6146/ DESCRIPTION: Devil-00 has...

Arki-DB 1.0 (catid) Remote SQL Injection Vulnerabilities

No description provided by source. ArkiDB SQL Injection's ArkiDB catid Ramote SQL Injection's ---------------------- Bug By Devil-00 [email protected] Whe Ar All Love Security4Arab For Ever S4a.cc ------------------------------------------------- Explorer Exploit By Devil-00...

Arki-DB 1.0 (catid) Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Arki-DB 1.0 catid Remote SQL Injection Vulnerabilities ======================================================== ArkiDB SQL Injection's ArkiDB catid Ramote SQL Injection's...

Arki-DB 1.0 - 'catid' SQL Injection

ArkiDB SQL Injection's ArkiDB catid Ramote SQL Injection's ---------------------- Bug By Devil-00 [email protected] Whe Ar All Love Security4Arab For Ever S4a.cc ------------------------------------------------- Explorer Exploit By Devil-00 ------------------------------------------------- Greetz :...

Arki-DB 1.0 - catid SQL Injection

Arki-DB 1.0 - catid SQL Injection ArkiDB SQL Injection's ArkiDB catid Ramote SQL Injection's ---------------------- Bug By Devil-00 [email protected] Whe Ar All Love Security4Arab For Ever S4a.cc ------------------------------------------------- Explorer Exploit By Devil-00...

SAP DB detection

SAP is listening on the remote port. Description : SAP/DB vserver, an ERP software, is running on the remote port. Please make sure that you applied the last patches, as a buffer overflow attack has been published against it. OpenVAS Vulnerability Test $Id: sapdbdetect.nasl 6063 2017-05-03...

IlohaMail Contacts Deletion Vulnerability

The target is running at least one instance of IlohaMail version 0.7.9-RC2 or earlier. Such versions contain a flaw that enables an authenticated user to delete contacts belonging to any user provided the DB-based backend is used to store contacts. The flaw arises because ownership of 'deleteitem...

SAP/DB vserver Detection

SAP/DB vserver, an ERP software, is running on the remote port. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-3369

Multiple SQL injection vulnerabilities in the Info-DB module infodb.php in Woltlab Burning Board 2.7 and earlier allow remote attackers to execute arbitrary SQL commands and possibly upload files via the 1 fileid and 2 subkatid parameters...

CVE-2005-3369

Multiple SQL injection vulnerabilities in the Info-DB module infodb.php in Woltlab Burning Board 2.7 and earlier allow remote attackers to execute arbitrary SQL commands and possibly upload files via the 1 fileid and 2 subkatid parameters...

CVE-2005-3369

Woltlab Burning Board

WoltlabSQL.txt

Woltlab Burning Board infodb.php multiple SQL injection -discovered by R Vendor: "Trooper" URL: www.wbbcoderforum.de Version: = 2.7 Type: SQL-injection Description: ------------------------ Info-DB is a very powerful and popular download-module with many features. Information:...

Woltlab 1.1/2.x - 'Info-DB Info_db.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15214/info Info-DB is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acces...