473 matches found
October 10, 2017—KB4041693 (Monthly Rollup)
None None...
October 10, 2017—KB4041678 (Security-only update)
None None...
October 10, 2017—KB4041690 (Monthly Rollup)
None None...
Description of the security update for the Microsoft Jet database engine remote code execution vulnerability: October 10, 2017
None None...
"Unexpected error from external database driver" error when you create or open Microsoft Excel .xls files
None None...
KLA11113 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information perform cross-site scripting and privilege escalations Below is a complete list of vulnerabilities: 1. Multiple...
Microsoft Access Installed (credentialed check)
Binary data microsoftaccessinstalled.nbin...
Microsoft Access Unsupported Version Detection
According to its self-reported version number, the installation of Microsoft Access on the remote Windows host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...
Song Song picture management system backstage exists universal password login vulnerability
Song Song picture management system using ASP + ACCESS + DIV + CSS + AJAX development, can be configured in support of ASP environment of any host. Song Song picture management system V8 version of the /admin/adminlogincheck.asp page there is a universal password login vulnerability. Attackers ca...
Shop7z /orderpro_del.asp id参数SQL注入漏洞
0x01 框架概述 相关厂商： shop7z 公开时间： 2015-04-23 官方主页: http://www.shop7z.com/ Shop7z网上购物系统是国内优秀的网上开店软件,模板新颖独特,功能强大,可以快速建立自己的网上商城。 0x02 漏洞细节 漏洞文件：orderprodel.asp 问题参数：id TEST:http://www.125309.com/orderprodel.asp?id= sqlmap证明： Place: GET Parameter: id Type: boolean-based blind Title: Microsoft Access...
Shop7z show_foot.asp, showone.asp等文件SQL注入漏洞
问题参数：cid TEST：http://www.125309.com/showfoot.asp?cid=1 code 区域 Place: GET Parameter: cid Type: boolean-based blind Title: Microsoft Access boolean-based blind - Parameter replace original va lue Payload: cid=IIF3932=3932,1,1/0 Type: UNION query Title: Generic UNION query NULL - 11 columns Payload...
Avast! - JetDb::Ised4x Performs Unbounded Search on Input
Avast! - JetDb::Ised4x Performs Unbounded Search on Input Source: https://code.google.com/p/google-security-research/issues/detail?id=551 The attached Microsoft Access Database causes JetDb::IsExploited4x to be called, which contains an unbounded search for objects. Proof of Concept:...
Avast! - JetDb::Ised4x Performs Unbounded Search on Input
Source: https://code.google.com/p/google-security-research/issues/detail?id=551 The attached Microsoft Access Database causes JetDb::IsExploited4x to be called, which contains an unbounded search for objects. Proof of Concept:...
Security Update for Microsoft Access 2016 (KB2910978) 32-Bit Edition
A security vulnerability exists in Microsoft Access 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Access 2013 (KB3085584) 64-Bit Edition
A security vulnerability exists in Microsoft Access 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Access 2013 (KB3085584) 32-Bit Edition
A security vulnerability exists in Microsoft Access 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Microsoft Access ACCDB File Memory Corruption (MS13-074: CVE-2013-3156) - Ver2
A code execution vulnerability exists in Microsoft Access. The vulnerability is due to a memory corruption error in the way that Microsoft Access parses ACCDB files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted ACCDB .accdb file with a...
shop7z九处SQL注入打包
简要描述： shop7z九处SQL注入打包 提交好几次了 虽然很累 不过想到审核的哥们要审核那么多洞 自己的累确实不算什么 详细说明： 案例： http://www.gzsewing.com http://www.125309.com http://www.nm3g.org http://35dianqi.com http://www.ai04.com http://www.longmm.net http://www.99pwan.com http://www.heimawg.com http://www.hzjdpm.cn http://ptwb.net http://5lmm.cn ...
WebDepo CMS SQL Injection
Advisory: SQLi-vulnerabilities in aplication CMS WebDepo Affected aplication web: Aplication CMS WebDepo Release date: 28/03/2014 Vendor URL: http://www.webdepot.co.il Vendor Status: 0day ========================== Vulnerability Description: ========================== Records and client practice...
shop7 价格处注入
简要描述： price.asp 文件注入 详细说明： price.asp文件 96行 if kind"" then sql="select pkid,model,productname,smallpicpath,price1,price"&session"customkind"&",kindname,pipai,addtime from viewproduct where kind like '"&kind&"%' and updown='1' order by pkid desc" else sql="select...