306 matches found
CVE-2004-2020
Multiple cross-site scripting XSS vulnerabilities in Php-Nuke 6.x through 7.3 allow remote attackers to inject arbitrary HTML or web script into the 1 optionbox parameter in the News module, 2 date parameter in the Statistics module, 3 year, month, and month1 parameters in the StoriesArchive...
CVE-2005-0247
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via 1 a large number of variables in a SQL statement being handled by the readsqlconstruct function, 2 a large number of INTO variables in a SELECT statement being handled by the...
Oracle Database PLSQL Statement - Multiple SQL Injections s
Oracle Database PLSQL Statement - Multiple SQL Injections s / Advanced SQL Injection in Oracle databases Becoming the SYS user with SQL Injection. This script creates functions that can be injected to replace the password of the SYS user and to restore it to the original value. By Esteban Martine...
CVE-2005-0247
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via 1 a large number of variables in a SQL statement being handled by the readsqlconstruct function, 2 a large number of INTO variables in a SELECT statement being handled by the...
GLSA-200411-32 : phpBB: Remote command execution
The remote host is affected by the vulnerability described in GLSA-200411-32 phpBB: Remote command execution phpBB contains a vulnerability in the highlighting code and several vulnerabilities in the username handling code. Impact : An attacker can exploit the highlighting vulnerability to access...
(SRADV00004) Remote and local vulnerabilities in pam_mysql
================================================= Secure Reality Pty Ltd. Security Advisory 4 SRADV00004 http://www.securereality.com.au ================================================= Title Remote and local vulnerabilities in pammysql Released 26/10/2000 Vulnerable All versions of pammysql 0.4...