Sql injection

Unspecified vulnerability in the Real User Experience Insight component in Oracle Enterprise Manager Grid Control 6.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Processing. NOTE: the previous information was obtained from the January 2011 CPU...

CVE-2009-5040

CVE-2009-5040 affects Cisco CallManager Express (CME) on Cisco IOS prior to 15.0(1)XA. The issue allows remote authenticated users to trigger a denial-of-service (device crash) by interacting with the SNR-number change menu using an Extension Mobility (EM) phone. Root cause is not detailed beyond...

Oracle Enterprise Manager Grid Control HTTP请求远程溢出漏洞

BUGTRAQ ID: 43945 CVE ID: CVE-2010-2390 Grid Control是为整个Oracle IT架构提供中心化监视、管理、生命周期管理功能的系统管理软件。 远程攻击者可以通过向Grid Control的EM Console组件提交超长的HTTP请求触发缓冲区溢出，导致执行任意指令。 Oracle Enterprise Manager Grid Control 10.x 厂商补丁： Oracle ------ Oracle已经为此发布了一个安全公告（cpuoct2010）以及相应补丁: cpuoct2010：Oracle Critical Patch...

VUPEN Security Research - Oracle Products HTTP Request Remote Buffer Overflow Vulnerability (CVE-2010-2390)

VUPEN Security Research - Oracle Products HTTP Request Remote Buffer Overflow Vulnerability CVE-2010-2390 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Oracle provides the world's most complete, open, and integrated business software and hardware systems, with more...

CVE-2010-2390

Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown...

Security feature bypass

Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown...

CVE-2010-2390

Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown...

CVE-2010-2390

CVE-2010-2390 describes a buffer overflow in the Oracle Enterprise Manager Grid Control EM Console component when processing overly long HTTP requests. The vulnerability affects Oracle Database Server 10.1.0.5/10.2.0.3, Oracle Fusion Middleware 10.1.2.3/10.1.4.3, and Enterprise Manager Grid Contr...

CVE-2010-2373

CVE-2010-2373 affects Oracle Enterprise Manager Grid Control (Console component). The vulnerability is remote-exploitable over HTTP and allows integrity impact with no authentication, as per the Oracle July 2010 CPU entry. Affected product versions are Grid Control 10.1.0.6 and 10.2.0.5. The CPU ...

Klonet E-Commerce SQL Injection

\ \ / | / / | \ / / /\ \ \ / / \ \ \ | | / ///\ \ /| /| /\ | / / / / / / Info============================================================= Software : Klonet E-Commerce vendor : http://www.klotnet.com/ Date : 09/26/2009 Indonesia Author : S3T4N Contact : rootatsux0r.net Blog :...

Klonet E-Commerce products.php SQL Injection

No description provided by source. \ \ / | / / | \ / / /\ \ \ / / \ \ \ | | / \ / \ | / | | \ /| | / ///\ \ /| /| /\ | / / / / / / Info============================================================= Software : Klonet E-Commerce vendor : http://www.klotnet.com/ Date : 09/26/2009 Indonesia...

Seditio CMS Events Plugin - 'c' SQL Injection

+=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBoy xContact : [email protected] xBlog :...

CVE-2008-0072

CVE-2008-0072 is a format string vulnerability in Evolution (emf_multipart_encrypted/display path) that could allow arbitrary code execution when a crafted encrypted message is opened. Affected: Evolution 2.12.3 and earlier; root cause: improper handling of format strings in encrypted mail conten...

eIQNetworks Enterprise Security Analyzer Monitoring.exe多个缓冲区溢出漏洞

eIQnetworks Enterprise Security Analyzer（ESA）是一款企业级的安全管理平台。 ESA的Monitoring.exe进程中存在两个缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 第一个漏洞存在于Monitoring.exe中负责处理TCP 9999端口上用户数据的例程中。如果连接到这个端口，用户就会立即被提示输入口令。这时可以发送HELP命令获得各种命令帮助： --------------------------------------------------------- Usage: QUERYMONITOR: to fetc...

[ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Local privilege escalation

Gentoo Linux Security Advisory GLSA 200603-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...