CVE-2010-2623

SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the ppid parameter...

Sql injection

SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the ppid parameter...

CVE-2010-2623

SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the ppid parameter...

CVE-2010-2623

CVE-2010-2623 documents an SQL injection in pages.php of Internet DM Specialist Bed and Breakfast. The flaw allows remote attackers to inject arbitrary SQL via the pp_id parameter, potentially compromising data confidentiality, integrity, and availability (per CVSS 2.0: AV:N/AC:L/Au:N/C:P/I:P/A:P...

CVE-2010-2159

Dameng DM Database Server allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors related to the SPDELBAKEXPIRED procedure in wdmdll.dll, which triggers memory corruption...

Memory corruption

Dameng DM Database Server allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors related to the SPDELBAKEXPIRED procedure in wdmdll.dll, which triggers memory corruption...

CVE-2010-2159

Dameng DM Database Server allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors related to the SPDELBAKEXPIRED procedure in wdmdll.dll, which triggers memory corruption...

CVE-2010-2159

Technical details (affected products, versions, exploit vectors, or fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2010-1149

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

Oracle Enterprise Linux 5.5 kernel security and bug fix update

2.6.18-194.el5 - net mlx4: pass attributes down to vlan interfaces Doug Ledford 573098 - block cfq-iosched: fix sequential read perf regression Jeff Moyer 571818 2.6.18-193.el5 - fs gfs2: locking fix for potential dos Steven Whitehouse 572390 CVE-2010-0727 - acpi powermeter: avoid oops on driver...

Joomla! Component DM Orders - 'id' SQL Injection

source: https://www.securityfocus.com/bid/37655/info The DM Orders component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component DM Orders - id SQL Injection

Joomla! Component DM Orders - id SQL Injection source: https://www.securityfocus.com/bid/37655/info The DM Orders component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

WordPress DM Albums插件任意文件删除漏洞

BUGTRAQ ID: 36799 DM Albums是在WordPress论坛中所使用的相册插件。 DM Albums插件中存在多个输入验证和访问验证错误，远程攻击者可以绕过安全限制或执行跨站脚本攻击。 1 由于没有正确地限制对dm-albums/wp-dm-albums-ajax.php脚本的访问，远程攻击者可以通过直接调用该脚本删除相册文件夹。 2 由于没有正确地过滤对dm-albums/wp-dm-albums-ajax.php所提交的deletealbum参数，远程攻击者可以利用目录遍历攻击删除相册根目录以外的文件夹。以下是有漏洞的代码段：...

DM FileManager 'album.php' Remote File Inclusion Vulnerability

The host is running DM FileManager and is prone to remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbdmfilemanagerfileincvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ DM FileManager 'album.php' Remote File Inclusion Vulnerability Authors: Sharath S Copyright: Copyright c 2009...

Remote file inclusion

PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

CVE-2009-2396

PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

CVE-2009-2399

PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

CVE-2009-2399

PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

CVE-2009-2396

PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...