525 matches found
PT-2014-9069 · Oracle +5 · Mysql Server +5
Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.38 and earlier Oracle MySQL Server versions 5.6.19 and earlier Description: The issue affects the availability of the system, allowing remote authenticated users to cause an impact via vectors related to DDL...
DDL CMS 2.1 'blacklist.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38643/info DDL CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
DDL CMS 1.0 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. +============================================================+ | | | DDL CMS 1.0 Multiple Remote File Inclusion Vulnerabilities | | | +============================================================+ | | | Author : HxH | | | | E-Mail : HxHatlivedotat | | |...
MGASA-2014-0222 Updated postgresql packages fix multiple vulnerabilities
Updated postgresql packages fix security vulnerabilities: Granting a role without ADMIN OPTION is supposed to prevent the grantee from adding or removing members from the granted role, but this restriction was easily bypassed by doing SET ROLE first. The security impact is mostly that a role memb...
Liferay Portal 6.2.0 CE GA1 Multiple XSS
According to its self-reported version number, the version of Liferay Portal running on the remote host is 6.2.0. It is, therefore, potentially affected by the following cross-site scripting vulnerabilities : - Input passed from page titles is not sanitized before it is displayed in the Recycle...
CVE-2011-1846
CVE-2011-1846 affects IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux/UNIX/Windows. The vulnerability arises from failure to properly revoke role membership from groups, allowing remote authenticated users to execute non-DDL statements by leveraging previously inherited possession of a role. T...
IBM Db2 DBADM Privilege Revocation Security Bypass Vulnerability
IBM Db2 is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...
IBM DB2 9.1 < Fix Pack 10 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 9.1 running on the remote host is prior to Fix Pack 10. It is, therefore, affected by one or more of the following issues : - It is possible to execute non-DDL statements even after an user's DBADM authority has been revoked. IC66811 - Multipl...
CVE-2010-3676
storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service assertion failure by modifying the 1 innodbfileformat or 2 innodbfilepertable configuration parameters for the InnoDB storage engine, then executing a DDL...
CVE-2010-3676
storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service assertion failure by modifying the 1 innodbfileformat or 2 innodbfilepertable configuration parameters for the InnoDB storage engine, then executing a DDL...
MySQL Community Server < 5.1.49 Multiple Vulnerabilities
The version of MySQL Community Server installed on the remote host is earlier than 5.1.49 and thus potentially affected by multiple vulnerabilities: - DDL statements could cause the server to crash. 55039 - Joins involving a table with a unique SET column could cause the server to crash. 54575 -...
DDL CMS 2.1 - blacklist.php Cross-Site Scripting
DDL CMS 2.1 - blacklist.php Cross-Site Scripting source: https://www.securityfocus.com/bid/38643/info DDL CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
DDL CMS 2.1 - 'blacklist.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/38643/info DDL CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...
DDL CMS 2.1 Cross Site Scripting
dear sir / madam the Itsecteam has discovered a new bug in DDL CMS and will be glad to report and public it . more information about this bug is listed below : Topic : ddl cms 2.1 bug type : cross site scripting XSS Credit : Itsecteam Remote : Yes Status : Bug author : itsecteam.com Advisory...
ddl cms 2.1 Cross Site Scripting Vulnerability
Exploit for unknown platform in category web applications ============================================== ddl cms 2.1 Cross Site Scripting Vulnerability ============================================== DDL CMS Dork : Powered by DDL CMS Script Exploit 1- http://Site.com/ddl/blacklist.php?sitename=Xss...
CVE-2009-3331
Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the wwwRoot parameter to 1 header.php, 2 submit.php, 3 submitted.php, and 4 autosubmitter/index.php...
CVE-2009-3331
CVE-2009-3331 affects DDL CMS 1.0 with multiple PHP remote file inclusion vulnerabilities allowing remote code execution via the wwwRoot parameter to header.php, submit.php, submitted.php, and autosubmitter/index.php. The CVSS-based data indicates network attack vector, low attack complexity, and...
DDL CMS 1.0 Remote File Inclusion
+============================================================+ | | | DDL CMS 1.0 Multiple Remote File Inclusion Vulnerabilities | | | +============================================================+ | | | Author : HxH | | | | E-Mail : HxHatlivedotat | | |...
DDL CMS 1.0 - Multiple Remote File Inclusions
DDL CMS 1.0 - Multiple Remote File Inclusions +============================================================+ | | | DDL CMS 1.0 Multiple Remote File Inclusion Vulnerabilities | | | +============================================================+ | | | Author : HxH | | | | E-Mail : HxHatlivedotat | |...
DDL CMS 1.0 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. +============================================================+ | | | DDL CMS 1.0 Multiple Remote File Inclusion Vulnerabilities | | | +============================================================+ | | | Author : HxH | | | | E-Mail : HxHatlivedotat | | |...