CVE-2009-2943

The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings...

CVE-2009-2942

CVE-2009-2942 affects mysql-ocaml bindings for MySQL (OCaml bindings) up to version 1.0.4, where mysql_real_escape_string is not properly supported. The root cause is missing proper escaping for multibyte character encodings, which can lead to escaping issues when handling multibyte sequences. De...

CVE-2009-2940

The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings...

Debian: Security Advisory (DSA-1911-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1909-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1910-1] New mysql-ocaml packages provide secure escaping

------------------------------------------------------------------------ Debian Security Advisory DSA-1910-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 14, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1909-1] New postgresql-ocaml packages provide secure escaping

------------------------------------------------------------------------ Debian Security Advisory DSA-1909-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 14, 2009 http://www.debian.org/security/faq -...

pygresql / mysql-ocaml / postgresql-ocaml SQL injection

Text escaping functions are not colled for multibyte charsets...

DSA-1910-1 mysql-ocaml - missing escape function

Bulletin has no description...

DSA-1909-1 postgresql-ocaml - missing escape function

Bulletin has no description...

dedecms(plus/feedback_js.php)injection vulnerability-vulnerability warning-the black bar safety net

Found by:Rainy'Fox&St0p Team:two fat network securityhttp://bbs.erpangzi.com Affected version: dedecms GBK 5.1 Vulnerability description: 文件 :plus/feedbackjs.php ifempty$arcID $row = $dlist-dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; ifisarray$row $urlindex = $row'id'; Get...

[SECURITY] [DSA 1889-1] New icu packages correct multibyte sequence parsing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1889-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 16, 2009 http://www.debian.org/security/faq -...

libicu multibyte character sequences invalid parsing.

No description provided...

[SECURITY] [DSA 1889-1] New icu packages correct multibyte sequence parsing

------------------------------------------------------------------------ Debian Security Advisory DSA-1889-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 16, 2009 http://www.debian.org/security/faq -...

Mandrake Security Advisory MDVSA-2009:189 (apache-mod_auth_mysql)

The remote host is missing an update to apache-modauthmysql announced via advisory MDVSA-2009:189. OpenVAS Vulnerability Test $Id: mdksa2009189.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:189 apache-modauthmysql Authors: Thomas Reinke Copyright:...

Empire CMS guestbook multibyte vulnerability-vulnerability warning-the black bar safety net

Author: dark gray Find used Empire CMS station,the site behind a directly applied:e/tool/gbook/? bid=1 Out is Empire CMS the guestbook,in the name of writing:缞\ Contact email at:,1,1,1,select concatusername,0×5f,password,0×5f,rnd from phomeenewsuser where userid=1,1,1,1,0,0,0/ After the submissio...

Mandriva Linux Security Advisory : apache-mod_auth_mysql (MDVSA-2009:189-1)

A vulnerability has been found and corrected in modauthmysql : SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql aka libapache2-mod-auth-mysql module for the Apache HTTP Server 2.x allows remote attackers to execute arbitrary SQL commands via multibyte character encodings for...

mb_ereg(i)_replace()code injection vulnerability, and extending the regular application of security-vulnerability warning-the black bar safety net

Source: http://www.80vul.com/pch/pch-003.txt mberegireplacecode injection vulnerability, and extends out of the regular application security author: ryatwolvez.org team:http://www.80vul.com date:2009-04-30 A description of the classification mberegreplaceis the support of multibyte regular...

Sql injection

SQL injection vulnerability in Load.php in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the dbcharacterset parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "" backslash...

CVE-2008-6741

SQL injection vulnerability in Load.php in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the dbcharacterset parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "" backslash...