Lucene search
K

6 matches found

Packet Storm
Packet Storm
added 2023/07/13 12:0 a.m.316 views

Vaidya-Mitra 1.0 SQL Injection

Title: Vaidya-Mitra 1.0 Multiple - SQLi Author: nu11secur1ty Date: 07.12.2023 Vendor: https://mayurik.com/ Software: free: https://www.sourcecodester.com/php/16720/free-hospital-management-system-small-practices.html, https://mayurik.com/source-code/P5890/best-hospital-management-system-in-php...

7.1AI score
Exploits0
Gentoo Linux
Gentoo Linux
added 2021/03/31 12:0 a.m.69 views

SQLite: Remote code execution

Background SQLite is a C library that implements an SQL database engine. Description It was discovered that SQLite incorrectly handled certain sub-queries. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition...

5.5CVSS4.1AI score0.00771EPSS
Exploits0
Ubuntu
Ubuntu
added 2021/02/11 12:37 p.m.122 views

USN-4732-1: SQLite vulnerability

It was discovered that SQLite incorrectly handled certain sub-queries. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code...

5.5CVSS7.2AI score0.00771EPSS
Exploits0
Veracode
Veracode
added 2021/02/05 8:44 p.m.115 views

Privilege Escalation

sqlite3 is vulnerable to privilege escalation. The vulnerability exists through a problem during handling sub-queries with both a correlated WHERE clause and a HAVING 0 clause where the parent query is itself an aggregate...

5.5CVSS2.4AI score0.00771EPSS
Exploits0References9Affected Software2
Tenable Nessus
Tenable Nessus
added 2009/11/25 12:0 a.m.59 views

MySQL 5.0 < 5.0.88 Multiple Vulnerabilities

The version of MySQL 5.0 installed on the remote host is earlier than 5.0.88. It is, therefore, potentially affected by the following vulnerabilities : - MySQL clients linked against OpenSSL are vulnerable to man-in-the-middle attacks. Bug 47320 - The GeomFromWKB function can be manipulated to...

6.8CVSS6.8AI score0.07665EPSS
Exploits9References9
Packet Storm
Packet Storm
added 2007/05/24 12:0 a.m.30 views

waraxe-2007-SA051.txt

waraxe-2007-SA051 - Sql Injection in 2z Project 0.9.5 ==================================================================== Author: Janek Vind "waraxe" Date: 23. May 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-51.html Target software description: Vulnerable: 2z Project 0.9.5...

7.4AI score
Exploits0
Rows per page
Query Builder