6392 matches found
CMSQLite CMySQLite 1.3 - Cross-Site Request Forgery
CMSQLite CMySQLite 1.3 - Cross-Site Request Forgery Title: CMSQlite & CMySQLite CSRF Vulnerability Author: ADEO Security Published: 28/06/2010 Version: v1.3 = Vendor: http://www.cmsqlite.net Description: "CMSQLite is a small, fast, flexible and complete Content-Management-System CMS. It's perfect...
RSA Key Manager SQL injection Vulnerability ( CVE-2010-1904 )
Product: RSA Key Manager Vendor: EMC/RSA Vulnerable Component: Key Manager Client Vulnerable Component Version: 1.5.x Vulnerability Type: SQL injection Vendor Contact Date: 4/20/2010 Status: Vendor does not want to fix the vulnerability. Vulnerability Details: RSA Key Manager Client software uses...
RSA Key Manager 1.5.x SQL Injection
CVE: CVE-2010-1904 Product: RSA Key Manager Vendor: EMC/RSA Vulnerable Component: Key Manager Client Vulnerable Component Version: 1.5.x Vulnerability Type: SQL injection Vendor Contact Date: 4/20/2010 Status: Vendor does not want to fix the vulnerability. Vulnerability Details: RSA Key Manager...
RSA Key Manager version 1.5.x SQL Injection Vulnerability
Exploit for php platform in category web applications ========================================================= RSA Key Manager version 1.5.x SQL Injection Vulnerability ========================================================= CVE: CVE-2010-1904 Product: RSA Key Manager Vendor: EMC/RSA Vulnerabl...
Bitrac personal blog system upload vulnerability-vulnerability warning-the black bar safety net
Bitrac the official version, Bitrac is based on ASP.NET 2.0 + SQLite for single-user blogging application, built-in URLRewrite and page compression, supports the MetaWeblogAPI, the self-write the HTML template engine, easy to modify style, full visual editing environment. The current vendors have...
CMSQLite <= 1.2 c参数SQL注入漏洞
CMSQLite是基于PHP和SQLite的内容管理系统。 CMSQlite的index.php页面存在SQL注入漏洞： ifisset$GET'c' $contentId=$GET'c'; else if $seourl $arrArticleInfo = $SYSTEM-resolveURL$SERVER'REQUESTURI', $langId; ifempty$arrArticleInfo $contentId=1; else $contentId = $arrArticleInfo0'articleId'; $module = $arrArticleInfo0'module';...
CMSQLite <= 1.2 mod参数本地文件包含漏洞
CMSQLite是基于PHP和SQLite的内容管理系统。 CMSQlite的index.php页面存在本地文件包含漏洞： / SET MODULE / ifisset$GET'mod' $module=$GET'mod'; else $module="index"; ... iffileexists"template/".$module.".php" include "template/".$module.".php"; else include "template/index.php"; 通过更改mod URL参数就可以包含webserver上的任意文件，导致泄漏敏感信息。...
Bitrac 1.25.0.2500个人博客系统上传漏洞
Bitrac 正式版本，Bitrac 是基于 ASP.NET 2.0 + SQLite 的单用户博客程序，内置 URLRewrite 和页面压缩功能，支持 MetaWeblogAPI，自写的 HTML 模板引擎，方便修改风格，完全的可视化编辑环境。 首先说一下Bitrac在线升级顺序。 在后台请求 升级 Control.ashx Automat string sCode = SiteFun.RandomStr9; AdmStat.SetLockFilesCode; 在网站Errors目录随机生成一个.lock 文件,同时文件名记录在 Autoset.Cookie + "Lock"...
PHP 5.2.x < 5.2.14, 5.3.x < 5.3.3 Multiple RCE Vulnerabilities
PHP is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php";...
CVE-2010-1868
The 1 sqlitesinglequery and 2 sqlitearrayquery functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by calling these functions with an empty SQL query, which triggers access of uninitialized memory...
Code injection
The 1 sqlitesinglequery and 2 sqlitearrayquery functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by calling these functions with an empty SQL query, which triggers access of uninitialized memory...
CVE-2010-1868
The 1 sqlitesinglequery and 2 sqlitearrayquery functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by calling these functions with an empty SQL query, which triggers access of uninitialized memory...
CVE-2010-1868
CVE-2010-1868 affects PHP 5.2.x (through 5.2.13) and 5.3.x (through 5.3.2). The vulnerability occurs in ext/sqlite/sqlite.c functions sqlite_single_query and sqlite_array_query, where calling with an empty SQL query can trigger access to uninitialized memory, potentially allowing context-dependen...
CVE-2010-1868
The 1 sqlitesinglequery and 2 sqlitearrayquery functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by calling these functions with an empty SQL query, which triggers access of uninitialized memory...
LightNEasy 3.1.x File Upload / Disclosure / Local File Inclusion
Title: LightNEasy 3.1.x Multiple Vulnerabilites Vendor: http://lightneasy.org/ Dork: "Powered by LightNEasy" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability46.htm...
SQLite Browser v2.0b1 Local DoS Vulnerability
No description provided by source. Exploit Title: SQLite Browser 2.0b1 Local DoS Vulnerability Author: Nishant Das Patnaik Tested on: Windows XP SP2/SP3 x86, Vista x86, Windows 7 x64 Code : A specially crafted SQL file query can cause the the application to freeze and finally crash. The bug is th...
SQLite Browser v2.0b1 Local DoS Vulnerability
Exploit for unknown platform in category dos / poc ============================================= SQLite Browser v2.0b1 Local DoS Vulnerability ============================================= Exploit Title: SQLite Browser 2.0b1 Local DoS Vulnerability Author: Nishant Das Patnaik Tested on: Windows X...
SQLite Browser 2.0b1 - Local Denial of Service
SQLite Browser 2.0b1 - Local Denial of Service Exploit Title: SQLite Browser 2.0b1 Local DoS Vulnerability Author: Nishant Das Patnaik Tested on: Windows XP SP2/SP3 x86, Vista x86, Windows 7 x64 Code : A specially crafted SQL file query can cause the the application to freeze and finally crash. T...
SQLite Browser 2.0b1 - Local Denial of Service
Exploit Title: SQLite Browser 2.0b1 Local DoS Vulnerability Author: Nishant Das Patnaik Tested on: Windows XP SP2/SP3 x86, Vista x86, Windows 7 x64 Code : A specially crafted SQL file query can cause the the application to freeze and finally crash. The bug is the SQL query processor engine, it...