(0Day) IBM Informix Dynamic Server SET ENVIRONMENT Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Informix Database Server. SQL query execution privileges are required to exploit this vulnerability. The specific flaw exists within the oninit process bound to TCP port 9088 when processing th...

CVE-2010-4652

Heap-based buffer overflow in the sqlpreparewhere function contrib/modsql.c in ProFTPD before 1.3.3d, when modsql is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly...

Heap overflow

Heap-based buffer overflow in the sqlpreparewhere function contrib/modsql.c in ProFTPD before 1.3.3d, when modsql is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly...

CVE-2010-4652

Heap-based buffer overflow in the sqlpreparewhere function contrib/modsql.c in ProFTPD before 1.3.3d, when modsql is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly...

CVE-2010-4652

ProFTPD (with mod_sql) is affected by CVE-2010-4652: a heap-based buffer overflow in sql_prepare_where in contrib/mod_sql.c can be triggered by a crafted username containing substitution tags, leading to a crash or potential arbitrary code execution. The issue is in ProFTPD versions prior to 1.3....

CVE-2010-4652

Heap-based buffer overflow in the sqlpreparewhere function contrib/modsql.c in ProFTPD before 1.3.3d, when modsql is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly...

CVE-2010-4652

Heap-based buffer overflow in the sqlpreparewhere function contrib/modsql.c in ProFTPD before 1.3.3d, when modsql is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly...

Joomla! Component com_virtuemart 1.1.6 - SQL Injection

Joomla! Component comvirtuemart 1.1.6 - SQL Injection source: https://www.securityfocus.com/bid/46070/info The VirtueMart eCommerce component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! Component com_virtuemart 1.1.6 - SQL Injection

source: https://www.securityfocus.com/bid/46070/info The VirtueMart eCommerce component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

CMS Tovar - 'tovar.php' SQL Injection

source: https://www.securityfocus.com/bid/45772/info CMS Tovar is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

WikLink 0.1.3 SQL Injection

www.eVuln.com advisory: "id" SQL Injection in WikLink Summary: http://evuln.com/vulns/171/summary.html Details: http://evuln.com/vulns/171/description.html -----------Summary----------- eVuln ID: EV0171 Software: WikLink Vendor: n/a Version: 0.1.3 Critical Level: medium Type: SQL Injection Status...

Information disclosure in LightNEasy

Vulnerability ID: HTB22751 Reference: http://www.htbridge.ch/advisory/informationdisclosureinlightneasy.html Product: LightNEasy Vendor: Fernando Baptista http://www.lightneasy.org/ Vulnerable Version: 3.2.2 Vendor Notification: 15 December 2010 Vulnerability Type: Information disclosure Status:...

QualDev eCommerce script - SQL Injection

==================================================== QualDev eCommerce script SQL injection vulnerability ==================================================== Exploit Title: QualDev eCommerce script SQL injection vulnerability Vendor: http://www.qualdev.com Date: 15.12.2010 Version: all version...

Joomla! Component JExtensions Property Finder - sf_id SQL Injection

Joomla! Component JExtensions Property Finder - sfid SQL Injection source: https://www.securityfocus.com/bid/45333/info JExtensions Property Finder is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Joomla! Component JE Auto 1.0 - SQL Injection

Joomla! Component JE Auto 1.0 - SQL Injection JE Auto 1.0 SQL Injection Vulnerability Name JE Auto Vendor http://joomlaextensions.co.in/extensions/components/je-auto.html Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at...

WordPress 3.0.1 - do_trackbacks() SQL Injection

WordPress 3.0.1 - dotrackbacks SQL Injection Description: SQL injection vulnerability in dotrackbacks function of WordPress allows remote attackers to execute arbitrary SELECT SQL query. Access Vector: Network Attack Complexity: Medium Authentication: Single Instance Confidentiality Impact: Parti...

Joomla! Component Annuaire - index.php?id SQL Injection

Joomla! Component Annuaire - index.php?id SQL Injection source: https://www.securityfocus.com/bid/45147/info The Annuaire component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Fedora Update for sepostgresql FEDORA-2010-15870

Check for the Version of sepostgresql OpenVAS Vulnerability Test Fedora Update for sepostgresql FEDORA-2010-15870 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Joomla! Component com_storedirectory - 'id' SQL Injection

source: https://www.securityfocus.com/bid/45094/info Joomla! Store Directory is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

FreeTicket 1.0.0 SQL Injection

Subject: eVuln.com SQL injections in FreeTicket New eVuln Advisory: SQL injections in FreeTicket Summary: http://evuln.com/vulns/146/summary.html Details: http://evuln.com/vulns/146/description.html -----------Summary----------- eVuln ID: EV0146 Software: FreeTicket Vendor: Mrcgiguy Version: 1.0....