6055 matches found
CVE-2007-2245
CVE-2007-2245 describes remote cross-site scripting (XSS) in phpMyAdmin prior to 2.10.1.0, enabling an attacker to inject arbitrary script/HTML via (1) the fieldkey parameter to browse_foreigners.php or (2) input to the PMA_sanitize function. Connected docs confirm multiple advisories and Debian/...
CVE-2007-2245
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the fieldkey parameter to browseforeigners.php or 2 certain input to the PMAsanitize function...
dcp-portal v611 >> RFi
vendor :http://www.dcp-portal.org/ by : www.hackerz.ir userz .saeid 1- remote DCP/library/adodb/adodb.inc.php ==== includeonce$path; 2- remote DCP/library/editor/editor.php ===== include $abspatheditor."PropAccestring.php 3- local == DCP/admin/phpMyAdmin/libraries/common.lib.php ===...
phpMyAdmin 2.9.1 - Multiple Cross-Site Scripting Vulnerabilities
phpMyAdmin 2.9.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/23624/info phpMyAdmin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
phpMyAdmin 2.9.1 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/23624/info phpMyAdmin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
XSS vulnerabilities
PMASA-2007-4 Announcement-ID: PMASA-2007-4 Date: 2007-04-24 Updated: 2007-05-17 Summary XSS vulnerabilities Description We received an advisory from Lukasz Plonka "sp3x" SecurityReason and we wish to thank him for his work. It was possible to trigger these attacks on various scripts due to...
XAMPP for Windows 1.6.0a - mssql_connect() Remote Buffer Overflow
XAMPP for Windows 1.6.0a - mssqlconnect Remote Buffer Overflow Connect$POST'host', $POST'user', $POST'password', $POST'database'; echo "DBServer: $POSTdbserver"; $result = $db-Execute"SELECT FROM $POSTtable"; ... mssqlconnect function is vulnerable to buffer overflow and the host argument is...
XAMPP for Windows 1.6.0a - 'mssql_connect()' Remote Buffer Overflow
Connect$POST'host', $POST'user', $POST'password', $POST'database'; echo "DBServer: $POSTdbserver"; $result = $db-Execute"SELECT FROM $POSTtable"; ... mssqlconnect function is vulnerable to buffer overflow and the host argument is totally unchecked. Also this shows a vulnerabilty in ADODB library...
XAMPP for Windows <= 1.6.0a mssql_connect() Remote BoF Exploit
Exploit for unknown platform in category remote exploits ============================================================== XAMPP for Windows Connect$POST'host', $POST'user', $POST'password', $POST'database'; echo "DBServer: $POSTdbserver"; $result = $db-Execute"SELECT FROM $POSTtable";...
Cross site scripting
Cross-site scripting XSS vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2007-2016
Cross-site scripting XSS vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
DEBIAN-CVE-2007-2016
Cross-site scripting XSS vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2007-2016
Cross-site scripting XSS vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2007-2016
Cross-site scripting XSS vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2007-2016
Cross-site scripting XSS vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2007-2016
Cross-site scripting XSS vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2007-2016
CVE-2007-2016 is a Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1, affecting the mysql/phpinfo.php script. The issue allows remote attackers to inject arbitrary web script or HTML through the lang[] parameter. The connected documents confirm the vulnerable component and parameter bu...
CVE-2007-2016
Cross-site scripting XSS vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
phpMyAdmin 2.6.1 Local Cross Site Scripting
""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...
Cross site scripting
Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting XSS attacks by injecting arbitrary JavaScript or HTML in a 1 db or 2 table parameter value followed by an uppercase end tag, which bypasses the protection...