MS12-070: Vulnerability in SQL Server could allow elevation of privilege: October 9, 2012

Resolves a vulnerability in Microsoft SQL Server on systems that are running SQL Server Reporting Services SSRS.View products that this article applies to.IntroductionMicrosoft has released security bulletin MS12-070. To view the complete security bulletin, go to one of the following Microsoft...

MS12-070: Description of the security update for SQL Server 2008 Service Pack 3 QFE: October 9, 2012

None None...

MS12-070: Description of the security update for SQL Server 2008 Service Pack 2 GDR: October 9, 2012

None None...

MS12-070: Description of the security update for SQL Server 2008 R2 Service Pack 1 QFE: October 9, 2012

None None...

MS12-070: Description of the security update for SQL Server 2008 Service Pack 3 GDR: October 9, 2012

None None...

MS12-070: Description of the security update for SQL Server 2012 GDR: October 9, 2012

None None...

MS12-070: Description of the security update for SQL Server 2012 QFE: October 9, 2012

None None...

MS12-070: Description of the security update for SQL Server 2005 Service Pack 4 QFE: October 9, 2012

None None...

MS12-070: Description of the security update for SQL Server 2008 Service Pack 2 QFE: October 9, 2012

None None...

MS12-070: Description of the security update for SQL Server 2005 Service Pack 4 GDR: October 9, 2012

None None...

CVE-2012-2552: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Reflected...

Microsoft to Fix Critical Word Flaw in October Patch Tuesday

Microsoft will release seven bulletins in the October Patch Tuesday next week, fixing 20 total vulnerabilities in Windows, Office, Lync and SQL Server. Only one of the bulletins is rated critical, while the six others are rated important. The one critical bulletin affects Microsoft Office 2003,...

CVE-2012-4015

Cross-site scripting XSS vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry...

Cross site scripting

Cross-site scripting XSS vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry...

CVE-2012-4015

Cross-site scripting XSS vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry...

CVE-2012-4015

CVE-2012-4015 concerns a cross-site scripting (XSS) vulnerability in the management screen of myLittleAdmin for SQL Server 2000 from myLittleTools . The flaw allows remote attackers to trigger arbitrary web script or HTML execution via crafted entries in the management interface, which leads to a...

PT-2012-5142

Name of the Vulnerable Software and Affected Versions myLittleAdmin for SQL Server 2000 Description A cross-site scripting XSS issue exists in the management screen of myLittleAdmin for SQL Server 2000, allowing remote attackers to inject arbitrary web script or HTML via crafted database entries...

CVE-2012-4015: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry...

Windows Gather Database Instance Enumeration

This module will enumerate a windows system for installed database instances This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Database Instance Enumeration', 'Description' = %q Th...

myLittleAdmin for SQL Server 2000 vulnerable to arbitrary script execution

Overview myLittleAdmin for SQL Server 2000 contains a vulnerability that may allow arbitrary script execution. myLittleAdmin for SQL server 2000 from myLittleTools is a web-based database management software.The management screen in myLittleAdmin for SQL server 2000 contains a vulnerability that...