3163 matches found
IBM DB2 10.5 < Fix Pack 4 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 10.5 running on the remote host is affected by the following vulnerabilities : - An error exists related to JavaScript Object Notation JSON-C handling, string parsing, and the hash function that allows denial of service attacks. CVE-2013-6371 ...
Code injection
The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted UNION clause in a subquery of a SELECT statement...
PT-2017-5934
Name of the Vulnerable Software and Affected Versions: Zend Framework versions prior to 1.12.7 Description: The issue concerns the Zend Db Select::order function, which does not properly handle parentheses. This allows remote attackers to conduct SQL injection attacks via unspecified vectors...
PT-2014-6059
Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.1.4 Snort versions prior to 3.0.13 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the eng parameter to "snort import aliases.php" or unspecified...
Irokez CMS 0.7.1 - Remote SQL Injection Vulnerability
No description provided by source. +--------------------------------------------------------------------------------------------------------------------+ +--------------------------------------------Irokez 0.7.1 SQL inlection--------------------------------------------+...
Webspell 4.x - safe_query Bypass Vulnerability
No description provided by source. INFORMATION +Name : Webspell 4.X safequery bypass Vulnerability +Author : silent vapor +Date : 29.09.2010 +Script : webspell +Price : free +Language :PHP +Discovered by silent vapor +Underground Agents +Greetz to Team-Internet, 4004-Security-Project, Easy Laster...
MySQL 5.0.x Single Row SubSelect Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22900/info MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain select statements to database metadata. An attacker can exploit this issue to crash the application, denying access ...
RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27742/info RPM Remote Print Manager is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer. An attacker may...
Wordpress Plugin Glossary - SQL Injection
No description provided by source. Exploit Title: WordPress WP Glossary plugin SQL Injection Vulnerability Date: 2011-30-10 Author: longrifle0x software: Wordpress Download: http://wordpress.org/extend/plugins/wp-glossary/ Tools: SQLMAP DESCRIPTIONDiscovered a vulnerability in WP Glossary,...
MySQL 3.23.x mysqld Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7052/info A vulnerability has been discovered for MySQL that may allow the mysqld service to start with elevated privileges. An attacker can exploit this vulnerability by creating a DATADIR/my.cnf that includes the line...
Joomla Component (com_equipment) SQL Injection Vulnerability
No description provided by source. Exploit Title : Joomla comequipment Sql Injection Vulnerability Date : 16 - 8 - 2010 Author : Forza-Dz Vendor : http://joomlaequipment.com/ Version : All Versions Tested on : Win Sp2 and Mac Dork = inurl:comequipment --- SQL Injection Vulenrability --- SQL...
MaxWebPortal 1.3 pic_popular.asp SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...
Linksys Devices 1.42/1.43 GET Request Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6301/info Several Linksys Broadband Router devices are prone to a buffer overflow conditions. The vulnerability occurs due to insufficient allocation of memory for buffers. An attacker can exploit this vulnerability by...
Gravity Board X 2.0 BETA (Public Release 3) - SQL Injection Vulnerability
No description provided by source. !/usr/bin/perl Exploit Title: Gravity Board X 2.0 BETA Public Release 3 SQL INJECTION Date: 26.02.2010 Author: Ctacok Software Link: http://www.gravityboardx.com/ Version: 2.0 BETA Public Release 3 Tested on: Windows SP 3 Code : exploit code use LWP::Simple; pri...
Infront SQL Injection Vulnerability
No description provided by source. Exploit Title: Infront SQL Injection Vulnerability Date: 12-06-2010 Author: TheMaster [email protected] Software Link: http://www.infront.com/ Version: N/A Tested on: Windows XP SP3 Author : TheMaster [email protected] Dork : intext:Powered by Infront Type of attack :...
phpMDJ 1.0.3 - SQL Injection Vulnerability
No description provided by source. ,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download : http://www.weboac.be/phpmdj/docs/phpmdj1.0.3.zip \ Vulnerability : Remote Sql Injection ...
sNews 1.7 - (index.php?category) SQL Injection Vulnerability
No description provided by source. sNews v1.7 index.php?category SQL Injection Vulnerability Author : CoBRa21 Author Web Page : http://www.ipbul.org Dork: Powered by sNews Sql Injection: http://localhost/path/index.php?category=-3 union select 0,version,2,3,4,5,6,7,8 Thanks http://e-banka.org &...
Ballettin Forum SQL Injection Vulnerability
No description provided by source. ==================================================================== Exploit Title: Ballettin Forum Multiple SQL Injection Vulnerability Date: 25/07/2010 Author: 3v0 aka evolution evolution ^ darkedition.com Software Link: http://www.ballettin.com Tested on:...
Koobi Pro 6.1 - Gallery (img_id)
No description provided by source. Koobi Pro v6.1 gallery imgid AUTHOR : BILGEKAGAN HOME : http://www.1923turk.biz DORK 1 : allinurl: index.php?p=gallerypic imgid EXPLOiT: index.php?p=gallerypic&imgid=-1+union+select+0,1,2,concatemail,0x3a,pass,4,5,6,7,8+from+kpro6user aDMN PANEL: admin/login.php...
Pre Shopping Mall 1.0 - Remote SQL Injection Vulnerability
No description provided by source. ============================================== Pre Shopping Mall v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Exploit:...