311 matches found
Fedora 23 : php (2016-db71b72137)
15 Sep 2016 PHP version 5.6.26 Core: - Fixed bug php72907 NULL pointer deref, segfault in gcremovezvalfrombuffer zendgc.c:260. Laruence Dba: - Fixed bug php71514 Bad dbareplace condition because of wrong API usage. cmb - Fixed bug php70825 Cannot fetch multiple values with group in ini file. cmb...
Fedora 24 : php (2016-62fc05fd68)
15 Sep 2016 PHP version 5.6.26 Core: - Fixed bug php72907 NULL pointer deref, segfault in gcremovezvalfrombuffer zendgc.c:260. Laruence Dba: - Fixed bug php71514 Bad dbareplace condition because of wrong API usage. cmb - Fixed bug php70825 Cannot fetch multiple values with group in ini file. cmb...
CVE-2016-2343
Patterson Dental Eaglesoft 17 has a hardcoded password of sql for the dba account, which allows remote attackers to obtain sensitive Dental.DB patient information via SQL statements...
CVE-2016-2343
Patterson Dental Eaglesoft 17 has a hardcoded password of sql for the dba account, which allows remote attackers to obtain sensitive Dental.DB patient information via SQL statements...
用友致远A6协同办公系统存在一处DBA权限SQL注入漏洞
简要描述： RT 详细说明： 搜索了一下， 没有被提交 漏洞位于：/yyoa/common/js/menu/test.jsp 文件中S1 参数 案例 http://.../yyoa/common/js/menu/test.jsp?doType=101&S1=select%20@@version http://.../yyoa/common/js/menu/test.jsp?doType=101&S1=select%20@@version ...:8080/yyoa/common/js/menu/test.jsp?doType=101&S1=select%20@@version...
CVE-2015-4762
CVE-2015-4762 affects Oracle E-Business Suite 12.2.3/12.2.4 in the Applications DBA – Online patching component. The connected NASL/SECURITYVULNS entries describe an unspecified vulnerability that allows a remote, authenticated attacker to access confidential information via Online patching. This...
Synology Video Station command injection and multiple SQL injection vulnerabilities
------------------------------------------------------------------------ Synology Video Station command injection and multiple SQL injection vulnerabilities ------------------------------------------------------------------------ Han Sahin, September 2015...
Synology Video Station 1.5-0757 - Multiple Vulnerabilities
------------------------------------------------------------------------ Synology Video Station command injection and multiple SQL injection vulnerabilities ------------------------------------------------------------------------ Han Sahin, September 2015...
Amazon Linux: Security Advisory (ALAS-2015-464)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unspecified Vulnerability in Oracle E-Business Oracle Applications DBA Component
Oracle E-Business Suite is a new generation of e-business suite from Oracle. A security vulnerability exists in the Oracle E-Business Suite Oracle Applications DBA component that can be exploited by remote attackers to compromise system confidentiality...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to AD Utilities...
CVE-2015-4743
CVE-2015-4743 affects Oracle E-Business Suite 12.2.3, specifically the Oracle Applications DBA component. The vulnerability allows remote authenticated users to affect confidentiality via unknown vectors related to AD Utilities. The connected sources corroborate a disclosed vulnerability in this ...
Oracle E-Business Multiple Vulnerabilities (July 2015 CPU)
The version of Oracle E-Business installed on the remote host is missing the July 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by affected by vulnerabilities in the following components : - Oracle Application Object Library CVE-2015-2618 - Oracle Application Object Library...
青果教务系统高危无限制注射(影响海量学校)
简要描述： 这么严重的SQL注射；青果会来确认吗？ 详细说明： 青果某系统存在无限制SQL注射；居然没有见到传说中的WAF拦截；并且大部分可以使用SQLMAP自动化注入测试工具进行测试；并且均为DBA权限；危害极大！ SQL Injection： /data/indexLOGIN.aspx 学生登录时UserID参数存在SQL注射漏洞 Case: 99%以上都是存在该漏洞；我想我该Mask一下保护这些学生！审核员你说呢？ 手工 1、...
某高校在用系统SQL注入（DBA）（无需登录）2-5
简要描述： ·· 详细说明： WooYun: 某高校在用系统sql注入（打包）（DBA）（无需登录）2 上一发 注入文件参数：language.asp editLangCode 案例 202.195.243.37/tasi/admin/system/language.asp --data "editLangCode=SS&editLangName=SS&langid=&action=add&btnSaveLang=%B1%A3%B4%E6" -p editLangCode 202.120.121.200/tasi/admin/system/language.asp --data...
通达oa2013又一奇葩注入DBA
简要描述： 无语了。。。 详细说明： 官网demo登录试用: http://www.day900.com/ 发现这个: http://www.day900.com/general/crm/apps/crm/include/search.php?ENTITY=crmmarketing&PAGESIZE=10&CURPAGE=&ORDERFIELD=&ORDERTYPE=&USERVIEW=1706 payload:ENTITY=crmmarketing' 返回这个: 请联系管理员 错误1064: You have an error in your SQL syntax; check the...
Oracle E-Business Multiple Vulnerabilities (January 2015 CPU)
The version of Oracle E-Business installed on the remote host is missing the January 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - Oracle Application Object Library - Oracle Applications DBA - Oracle Applications DBA - Oracle...
Unspecified Vulnerability in Oracle E-Business Suite Oracle Applications DBA Component
Oracle E-Business Suite is a new generation of e-business suite from Oracle. A security vulnerability exists in the Oracle E-Business Suite Oracle Applications DBA component that could be exploited by remote attackers to compromise system confidentiality, integrity, and availability...
CVE-2015-0393
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to DB Privileges. NOTE: the...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to ADDDL...