313 matches found
CVE-2016-3562
Unspecified vulnerability in the RDBMS Security and SQLPlus components in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality via vectors related to DBA...
Unspecified Vulnerability in Oracle E-Business Suite Oracle Applications DBA Component
Oracle E-Business Suite E-Business Suite is Oracle's Oracle set of fully integrated global business management software. Oracle Applications DBA is one of the application database management component. An unspecified vulnerability exists in the AD Utilities subcomponent of the Oracle Applications...
Fedora 23 : php (2016-db71b72137)
15 Sep 2016 PHP version 5.6.26 Core: - Fixed bug php72907 NULL pointer deref, segfault in gcremovezvalfrombuffer zendgc.c:260. Laruence Dba: - Fixed bug php71514 Bad dbareplace condition because of wrong API usage. cmb - Fixed bug php70825 Cannot fetch multiple values with group in ini file. cmb...
Fedora 24 : php (2016-62fc05fd68)
15 Sep 2016 PHP version 5.6.26 Core: - Fixed bug php72907 NULL pointer deref, segfault in gcremovezvalfrombuffer zendgc.c:260. Laruence Dba: - Fixed bug php71514 Bad dbareplace condition because of wrong API usage. cmb - Fixed bug php70825 Cannot fetch multiple values with group in ini file. cmb...
CVE-2016-2343
Patterson Dental Eaglesoft 17 has a hardcoded password of sql for the dba account, which allows remote attackers to obtain sensitive Dental.DB patient information via SQL statements...
CVE-2016-2343
Patterson Dental Eaglesoft 17 has a hardcoded password of sql for the dba account, which allows remote attackers to obtain sensitive Dental.DB patient information via SQL statements...
用友致远A6协同办公系统存在一处DBA权限SQL注入漏洞
简要描述： RT 详细说明： 搜索了一下， 没有被提交 漏洞位于：/yyoa/common/js/menu/test.jsp 文件中S1 参数 案例 http://.../yyoa/common/js/menu/test.jsp?doType=101&S1=select%20@@version http://.../yyoa/common/js/menu/test.jsp?doType=101&S1=select%20@@version ...:8080/yyoa/common/js/menu/test.jsp?doType=101&S1=select%20@@version...
CVE-2015-4762
CVE-2015-4762 affects Oracle E-Business Suite 12.2.3/12.2.4 in the Applications DBA – Online patching component. The connected NASL/SECURITYVULNS entries describe an unspecified vulnerability that allows a remote, authenticated attacker to access confidential information via Online patching. This...
Synology Video Station command injection and multiple SQL injection vulnerabilities
------------------------------------------------------------------------ Synology Video Station command injection and multiple SQL injection vulnerabilities ------------------------------------------------------------------------ Han Sahin, September 2015...
Synology Video Station 1.5-0757 - Multiple Vulnerabilities
------------------------------------------------------------------------ Synology Video Station command injection and multiple SQL injection vulnerabilities ------------------------------------------------------------------------ Han Sahin, September 2015...
Amazon Linux: Security Advisory (ALAS-2015-464)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unspecified Vulnerability in Oracle E-Business Oracle Applications DBA Component
Oracle E-Business Suite is a new generation of e-business suite from Oracle. A security vulnerability exists in the Oracle E-Business Suite Oracle Applications DBA component that can be exploited by remote attackers to compromise system confidentiality...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to AD Utilities...
CVE-2015-4743
CVE-2015-4743 affects Oracle E-Business Suite 12.2.3, specifically the Oracle Applications DBA component. The vulnerability allows remote authenticated users to affect confidentiality via unknown vectors related to AD Utilities. The connected sources corroborate a disclosed vulnerability in this ...
Oracle E-Business Multiple Vulnerabilities (July 2015 CPU)
The version of Oracle E-Business installed on the remote host is missing the July 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by affected by vulnerabilities in the following components : - Oracle Application Object Library CVE-2015-2618 - Oracle Application Object Library...
青果教务系统高危无限制注射(影响海量学校)
简要描述： 这么严重的SQL注射；青果会来确认吗？ 详细说明： 青果某系统存在无限制SQL注射；居然没有见到传说中的WAF拦截；并且大部分可以使用SQLMAP自动化注入测试工具进行测试；并且均为DBA权限；危害极大！ SQL Injection： /data/indexLOGIN.aspx 学生登录时UserID参数存在SQL注射漏洞 Case: 99%以上都是存在该漏洞；我想我该Mask一下保护这些学生！审核员你说呢？ 手工 1、...
某高校在用系统SQL注入（DBA）（无需登录）2-5
简要描述： ·· 详细说明： WooYun: 某高校在用系统sql注入（打包）（DBA）（无需登录）2 上一发 注入文件参数：language.asp editLangCode 案例 202.195.243.37/tasi/admin/system/language.asp --data "editLangCode=SS&editLangName=SS&langid=&action=add&btnSaveLang=%B1%A3%B4%E6" -p editLangCode 202.120.121.200/tasi/admin/system/language.asp --data...
通达oa2013又一奇葩注入DBA
简要描述： 无语了。。。 详细说明： 官网demo登录试用: http://www.day900.com/ 发现这个: http://www.day900.com/general/crm/apps/crm/include/search.php?ENTITY=crmmarketing&PAGESIZE=10&CURPAGE=&ORDERFIELD=&ORDERTYPE=&USERVIEW=1706 payload:ENTITY=crmmarketing' 返回这个: 请联系管理员 错误1064: You have an error in your SQL syntax; check the...
Oracle E-Business Multiple Vulnerabilities (January 2015 CPU)
The version of Oracle E-Business installed on the remote host is missing the January 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - Oracle Application Object Library - Oracle Applications DBA - Oracle Applications DBA - Oracle...
Unspecified Vulnerability in Oracle E-Business Suite Oracle Applications DBA Component
Oracle E-Business Suite is a new generation of e-business suite from Oracle. A security vulnerability exists in the Oracle E-Business Suite Oracle Applications DBA component that could be exploited by remote attackers to compromise system confidentiality, integrity, and availability...