945 matches found
Mini File Host 1.2.1 - 'language' Local File Inclusion
!/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request vulnerability in latest version perl POC, 2008-01-19...
Debian Security Advisory DSA 683-1 (postgresql)
The remote host is missing an update to postgresql announced via advisory DSA 683-1. OpenVAS Vulnerability Test $Id: deb6831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 683-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Mandrake Linux Security Advisory : postgresql (MDKSA-2007:188)
PostgreSQL 8.1 and probably later and earlier versions, when local trust authentication is enabled and the Database Link library dblink is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from...
DEBIAN-CVE-2007-4398
Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...
Unfixed XSS vulnerability at www.pl-berichte.de
Security researcher Lars Strojny, has submitted on 26/07/2007 a cross-site-scripting XSS vulnerability affecting www.pl-berichte.de, which at the time of submission ranked 345115 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via 1 SYS.DBMSDRS in the DataGuard component DB03, 2 SYS.DBMSSTANDARD in the PL/SQL component DB10, 3 MDSYS.RTREEIDX in the...
CVE-2007-3855
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via 1 SYS.DBMSDRS in the DataGuard component DB03, 2 SYS.DBMSSTANDARD in the PL/SQL component DB10, 3 MDSYS.RTREEIDX in the...
CVE-2007-3855
CVE-2007-3855 affects multiple Oracle Database versions (9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3) with vulnerabilities in the DataGuard component (SYS.DRMS), the PL/SQL component (SYS.DBMS_STANDARD), the Spatial component (MDSYS.RTREE_IDX), and the SQL Compiler (DB17). The description no...
CVE-2007-3855
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via 1 SYS.DBMSDRS in the DataGuard component DB03, 2 SYS.DBMSSTANDARD in the PL/SQL component DB10, 3 MDSYS.RTREEIDX in the...
CVE-2007-3855: Undefined Security Weakness
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via 1 SYS.DBMSDRS in the DataGuard component DB03, 2 SYS.DBMSSTANDARD in the PL/SQL component DB10, 3 MDSYS.RTREEIDX in the...
CVE-2007-3677: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Maxsi eVisit Analyst allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 idsp1.pl, 2 ip.pl, and 3 einsitedirector.pl. NOTE: this issue can be leveraged for path disclosure from resulting error messages...
CVE-2007-3279
PostgreSQL 8.1 and probably later versions, when the PL/pgSQL plpgsql language has been created, grants certain plpgsql privileges to the PUBLIC domain, which allows remote attackers to create and execute functions, as demonstrated by functions that perform local brute-force password guessing...
CVE-2007-3279
PostgreSQL 8.1+ plpgsql allows certain privileges to PUBLIC, enabling remote attackers to create/execute functions (CVE-2007-3279). Mandriva advisory MDKSA-2007:188 describes updated packages to fix these issues; remediation involves applying the vendor patch/update for affected PostgreSQL/plpgsq...
CVE-2007-2008
Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...
Authentication flaw
admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the isadmin parameter to 1...
Directory traversal
Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...
CVE-2007-2006
Multiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 login or 2 pass parameter...
CVE-2007-2007
admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the isadmin parameter to 1...