Lucene search
+L

9 matches found

OSV
OSV
•added 2026/06/18 11:37 p.m.•19 views

CVE-2026-12048 pgAdmin 4: Stored XSS via untrusted error and plan-node text rendered through html-react-parser

Stored cross-site scripting in pgAdmin 4's error-rendering and plan-node-rendering paths. Text returned by a PostgreSQL server ErrorResponse messages, including object names quoted back inside relation-does-not-exist errors and inside EXPLAIN Recheck Cond / Exact Heap Blocks fields was passed...

9.3CVSS5.7AI score
SaveExploits0References5
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•56 views

Quest Toad for Oracle Explain Plan Display ActiveX Control (QExplain2.dll 6.6.1.1115) Remote File Creation / Overwrite PoC

No description provided by source. !-- Quest Toad for Oracle Explain Plan Display ActiveX Control QExplain2.dll 6.6.1.1115 Remote File Creation / Overwrite vendor site: http://www.quest.com/ file tested: QuestToad-Development-Suite-for-Oracle110R2.exe CLSID: F7014877-6F5A-4019-A3B2-74077F2AE126...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2012/04/06 12:00 a.m.•48 views

Quest Toad For Oracle Explain Plan Display File Creation / Overwrite

try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche original url: http://retrogod.altervista.org/9sgquesttoadpoc.htm...

0.3AI score
SaveExploits0
zdt
zdt
•added 2012/04/05 12:00 a.m.•37 views

Quest Toad for Oracle Explain Plan Display ActiveX Control Remote File Creation

Exploit for windows platform in category remote exploits try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche 0day.today 2018-03-09...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/04/05 12:00 a.m.•44 views

Quest Toad for Oracle Explain Plan Display ActiveX Control - 'QExplain2.dll 6.6.1.1115' Remote File Creation / Overwrite

try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche...

5.3AI score
SaveExploits0
NVD
NVD
•added 2011/07/20 11:55 p.m.•35 views

CVE-2011-2248

Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability, relate...

6.8CVSS6.6AI score0.01176EPSS
SaveExploits0References2
Prion
Prion
•added 2011/07/20 11:55 p.m.•29 views

Design/Logic Flaw

Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability, relate...

6.8CVSS7.1AI score0.01176EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
•added 2011/07/20 12:00 a.m.•6 views

PT-2011-3711

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7, 11.2.0.1, and 11.2.0.2 Oracle Enterprise Manager Grid Control versions 10.1.0.6, 10.2.0.5, and 11.1.0.1 Description The issue affects the confidentiality, integrity, and availability of the system,...

6.8CVSS0.01176EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/07/20 12:00 a.m.•8 views

CVE-2011-2248: Undefined Security Weakness

Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability, relate...

6.8CVSS6.2AI score0.01176EPSS
SaveExploits0References1
Rows per page
Query Builder