20 matches found
OESA-2026-3183 perl-DBI security update
The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...
CVE-2026-15043 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text
DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl's le operator...
EUVD-2001-1206
Malware in sbrugna...
EUVD-1999-0734
Malware in sbrugna...
CVE-1999-0753
The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories...
Hughes Technologies Mini SQL (mSQL) 2.0.11 w3-msql Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/898/info w3-msql is a cgi-program shipped with Mini-SQL which acts as a web interface for msql. There are a number of buffer overflow vulnerabilities in it with one proven to be exploitable. The exploitable buffer is the...
Hughes Technologies Mini SQL (mSQL) 2.0/2.0.10 Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/591/info Under certain versions of Mini SQL, the w3-msql CGI script allows users to view directories which are set for private access via .htaccess files. W3-mSQL converts any form data passed to a script into global Lite...
Mini SQL 1.0/1.3 - Remote Format String
// source: https://www.securityfocus.com/bid/8295/info Mini SQL mSQL has been reported prone to a remotely exploitable format string vulnerability, when handling user-supplied data. Reportedly a remote attacker may send malicious format specifiers to trigger the issue. This vulnerability could...
CVE-2001-1225
The vulnerability CVE-2001-1225 affects Hughes Technology Mini SQL 2.0.10–2.0.12. Local users can trigger a denial of service by constructing a very large array in a table, causing Mini SQL to crash when the table is queried. Exploit details or in‑the‑wild status are not provided in the documents...
CVE-2001-1225
Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried...
CVE-2001-1225
Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried...
CVE-1999-1260
The CVE-1999-1260 issue affects mSQL (Mini SQL) 2.0.6 where the ServerStats query allows a remote attacker to obtain sensitive server information (logged users, database names, server version). The provided documents describe the vulnerable component and impact but do not specify a mitigation or ...
CVE-1999-0753
The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories...
CVE-1999-0753
CVE-1999-0753 affects the Mini SQL package via the w3-msql CGI script. The issue allows remote attackers to view restricted directories through the CGI, exposing partial confidentiality (per CVSS: Network, Low attack complexity, No authentication, Partial confidentiality/Integrity/Availability). ...
Mini SQL CGI content-length Field Remote Overflow
The mini-sql program comes with the w3-msql CGI which is vulnerable to a buffer overflow. An attacker may use it to gain a shell on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10296; scriptversion"1.40"; scriptcveid"CVE-2000-0012"...
Hughes Technologies Mini SQL (mSQL) 2.0.11 - w3-msql Remote Buffer Overflow
Hughes Technologies Mini SQL mSQL 2.0.11 - w3-msql Remote Buffer Overflow // source: https://www.securityfocus.com/bid/898/info w3-msql is a cgi-program shipped with Mini-SQL which acts as a web interface for msql. There are a number of buffer overflow vulnerabilities in it with one proven to be...
Mini SQL w3-msql Arbitrary Directory Access (deprecated)
This plugin has been deprecated due to the age of the vulnerability and unreliability of the plugin. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/12/02. Deprecated due to age of the vulnerability an unreliability of the plugin. include"compat.inc"; ifdescription scriptid10143;...
Hughes Technologies Mini SQL (mSQL) 2.02.0.10 - Information Disclosure
Hughes Technologies Mini SQL mSQL 2.02.0.10 - Information Disclosure source: https://www.securityfocus.com/bid/591/info Under certain versions of Mini SQL, the w3-msql CGI script allows users to view directories which are set for private access via .htaccess files. W3-mSQL converts any form data...
Hughes Technologies Mini SQL (mSQL) 2.0/2.0.10 - Information Disclosure
source: https://www.securityfocus.com/bid/591/info Under certain versions of Mini SQL, the w3-msql CGI script allows users to view directories which are set for private access via .htaccess files. W3-mSQL converts any form data passed to a script into global Lite variables and these variables can...