Lucene search
K

16 matches found

CNNVD
CNNVD
added 2021/12/10 12:0 a.m.1 views

Markdown To Pdf 代码问题漏洞

Markdown To Pdf is a simple and crackable Cli tool from the individual developer Simon Hanisch in Germany. It is used to convert Markdown to pdf. Markdown To Pdf in the code problematic vulnerability, the vulnerability stems from the service using org.h2.jdbc.JdbcResultSet.getSQLXML method to get...

9.1CVSS7.9AI score0.00766EPSS
Exploits1References6
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.21 views

Microsoft SQL Server 2000 SQLXML Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5004/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML Extensible Markup Language format. Such queries can be sent using various methods of communication...

7.1AI score
Exploits0
Cvelist
Cvelist
added 2003/04/02 5:0 a.m.19 views

CVE-2002-0187

Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."...

7.4AI score0.14879EPSS
Exploits0References3
CVE
CVE
added 2003/04/02 5:0 a.m.67 views

CVE-2002-0186

CVE-2002-0186 describes a buffer overflow in the Microsoft SQLXML ISAPI extension for SQL Server 2000. The flaw arises from inadequate validation of the contenttype parameter in SQLXML HTTP requests, allowing a remote attacker to trigger a crash or execute arbitrary code (the extension runs with ...

7.5CVSS8.2AI score0.73411EPSS
Exploits0References9Affected Software1
CVE
CVE
added 2003/04/02 5:0 a.m.59 views

CVE-2002-0187

The CVE-2002-0187 entry corresponds to a cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000, where an attacker could inject script via the root parameter of an XML SQL query. Connected documents also describe a related overflow issue in the SQLXML ISAPI filter...

7.5CVSS7.4AI score0.14879EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2003/03/02 12:0 a.m.28 views

MS02-030: Unchecked Buffer in SQLXML (321911)

The remote host is running SQLXML. There are flaws in this application that could allow a remote attacker to execute arbitrary code on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11304;...

7.5CVSS6.2AI score0.73411EPSS
Exploits0References3
NVD
NVD
added 2002/07/03 4:0 a.m.16 views

CVE-2002-0186

Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."...

7.5CVSS8.2AI score0.73411EPSS
Exploits0References9
NVD
NVD
added 2002/07/03 4:0 a.m.14 views

CVE-2002-0187

Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."...

7.5CVSS7.4AI score0.14879EPSS
Exploits0References3
CERT
CERT
added 2002/06/25 12:0 a.m.34 views

Microsoft SQLXML ISAPI filter vulnerable to buffer overflow via contenttype parameter

Overview A buffer overflow vulnerability exists in the Microsoft SQLXML Internet Services Application Programming Interface ISAPI extension for Internet Information Server IIS. This vulnerability could allow a remote attacker to cause a denial of service or execute arbitrary code with LocalSystem...

7.5CVSS8.2AI score0.73411EPSS
Exploits0References4
CERT
CERT
added 2002/06/25 12:0 a.m.22 views

Microsoft SQLXML HTTP components vulnerable to cross-site scripting via root parameter

Overview A cross-site scripting vulnerability exists in the Microsoft SQLXML HTTP components. This vulnerability could allow an attacker to execute script on a victim's system with the victim's privileges. Description Microsoft SQL Server 2000 includes a feature called SQLXML that allows the serv...

7.5CVSS6.1AI score0.14879EPSS
Exploits0References4
securityvulns
securityvulns
added 2002/06/13 12:0 a.m.38 views

wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting

Westpoint Security Advisory Title: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting Risk Rating: Medium Software: Microsoft SQLXML 3.0 / IIS 5.0 / SQLServer 2000 Platforms: Win2K Vendor URL: www.microsoft.com Author: Matt Moore [email protected] Date: 12 June 2002 Advisory ID:...

7.5CVSS0.3AI score0.73411EPSS
Exploits0
securityvulns
securityvulns
added 2002/06/13 12:0 a.m.36 views

Security Bulletin MS02-030: Unchecked Buffer in SQLXML Could Lead to Code Execution (Q321911)

---------------------------------------------------------------------- Title: Unchecked Buffer in SQLXML Could Lead to Code Execution Q321911 Date: 12 June 2002 Software: Microsoft SQLXML Impact: Two vulnerabilities, the most serious of which could run code of attacker's choice. Max Risk:...

0.1AI score
Exploits0
exploitpack
exploitpack
added 2002/06/12 12:0 a.m.14 views

Microsoft SQL Server 2000 - SQLXML Script Injection

Microsoft SQL Server 2000 - SQLXML Script Injection source: https://www.securityfocus.com/bid/5005/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML Extensible Markup Language format. Such queries can be sent using various method...

0.3AI score
Exploits0
exploitpack
exploitpack
added 2002/06/12 12:0 a.m.8 views

Microsoft SQL Server 2000 - SQLXML Buffer Overflow (PoC)

Microsoft SQL Server 2000 - SQLXML Buffer Overflow PoC source: https://www.securityfocus.com/bid/5004/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML Extensible Markup Language format. Such queries can be sent using various...

Exploits0
Exploit DB
Exploit DB
added 2002/06/12 12:0 a.m.22 views

Microsoft SQL Server 2000 - 'SQLXML' Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/5004/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML Extensible Markup Language format. Such queries can be sent using various methods of communication, one of which is via HTTP. SQLXML...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2002/06/12 12:0 a.m.23 views

Microsoft SQL Server 2000 - SQLXML Script Injection

source: https://www.securityfocus.com/bid/5005/info SQLXML is a component of SQL Server 2000, which enables SQL servers to receive and send database queries via XML Extensible Markup Language format. Such queries can be sent using various methods of communication, one of which is via HTTP. SQLXML...

7.4AI score
Exploits0
Rows per page
Query Builder