Sql injection

SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php...

CVE-2008-5971

CVE-2008-5971 describes a cross-site scripting (XSS) vulnerability in the profile_social.php component of the i-Net Solution Orkut Clone. The issue allows remote authenticated users to inject arbitrary web script or HTML by manipulating the id parameter. The available references from NVD/PRION/CV...

Design/Logic Flaw

Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console...

CVE-2009-0170

Technical details about CVE-2009-0170 are not publicly available in the provided connected documents. Monitor for updates from vendors and advisories to determine affected products, impact, and fixes.

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2008-5452

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2008-4016

CVE-2008-4016 technical details are not publicly available in the provided documents. No affected products, vectors, or remediation are specified here. Monitor for updates.

CVE-2008-5456

The CVE-2008-5456 entry describes an unspecified vulnerability in the PeopleSoft Enterprise HRMS component of Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8, allowing remote authenticated users to affect confidentiality and integrity via unknown vectors. The CVSSv2 bas...

CVE-2008-5451

Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.5 allows remote authenticated users to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the SQLPlus Windows GUI component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2008-5857

The CVE-2008-5857 issue affects the KnowledgeTree DropDocuments plugin used before version 3.5.4a . The vulnerability allows remote authenticated users to escalate privileges to administrative level by performing a specific sequence of actions involving "browse documents" and dashboard requests ....

CVE-2008-5709

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

Code injection

wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manageoptions and uploadfiles capabilities to execute arbitrary code by uploading a PHP script and adding this...

CVE-2008-5678

Fretwell-Downing Informatics FDI OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via the infile parameter to the default URI under cgi/, as demonstrated by the 1 getsettings.ini, 2 setup.ini, and 3 text.ini files...

Design/Logic Flaw

Fretwell-Downing Informatics FDI OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via the infile parameter to the default URI under cgi/, as demonstrated by the 1 getsettings.ini, 2 setup.ini, and 3 text.ini files...

CVE-2008-5678

Fretwell-Downing Informatics FDI OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via the infile parameter to the default URI under cgi/, as demonstrated by the 1 getsettings.ini, 2 setup.ini, and 3 text.ini files...

2532/Gigs 1.2.2 Stable - Remote Authentication Bypass

/ ------------------------------------------------------------------------------------------------ 2532|Gigs 1.2.2 Stable Remote Login Bypass Vulnerability ------------------------------------------------------------------------------------------------ by athos - stakerathotmaildotit...

CVE-2008-5416

Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine MSDE 2000 SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine WMSDE on Windows Server 2003 SP1 and SP2; and Windows Internal Database WYukon SP2...

CVE-2008-5296

Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information...

Symantec Backup Exec远程绕过认证及缓冲区溢出漏洞

BUGTRAQ ID: 32346,32347 Symantec Backup Exec是一款全面的数据备份解决方案。 Backup Exec的远程代理所使用的一些认证方式中存在多个错误，可能允许用户绕过认证获得非授权访问，读取或删除任意文件；此外数据管理协议中还存在缓冲区溢出漏洞。远程攻击者可以通过前一个漏洞认证为特权用户，然后触发缓冲区溢出导致执行任意指令。 Symantec Backup Exec for Windows Servers 12.5 Symantec Backup Exec for Windows Servers 12.0 Symantec Backup Exec f...