Oracle Database Server REPCAT_RPC.VALIDATE_REMOTE_RC SQL Injection (CVE-2009-1021)

Oracle Database Server is an enterprise-level relational database application suite. An SQL injection vulnerability has been reported in Oracle Database server. Remote authenticated attackers having Create Session privileges can exploit this vulnerability to inject and execute malicious SQL...

tikiwiki-traverse.txt

============================================= INTERNET SECURITY AUDITORS ALERT 2007-006 - Original release date: December 18th, 2007 - Last revised: December 24th, 2007 - Discovered by: Jesus Olmos Gonzalez - Severity: 5/5 ============================================= I. VULNERABILITY...

MyBloggie 2.1 - index.php Cross-Site Scripting

MyBloggie 2.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13507/info myBloggie is affected by multiple vulnerabilities. An attacker may leverage these issues to carry out cross-site scripting, HTML injection and SQL injection attacks against the affected application...

Xaos 3.0 - Language Option Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/7838/info It has been reported that Xaos is vulnerable to a boundary condition error in the command option processing. Because of this, an attacker may be able to gain elevated privileges, potentially compromising the integrity of the host. / / xaos =...

OneOrZero Helpdesk 1.4 - 'TUpdate.php' SQL Injection

source: https://www.securityfocus.com/bid/7609/info An SQL injection issue has been reported to affect OneOrZero Helpdesk. The error presents itself in a OneOrZero Helpdesk script that fails to sufficiently sanitize user-supplied input before including it in SQL queries. Successful exploitation...