468 matches found
CVE-2011-0497
Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD2, as used in Appeon, Replication Server Messaging Edition RSME, and WorkSpace, allows remote attackers to read arbitrary files via "../" dot dot forward-slash backslash sequences in a crafted request...
CVE-2011-0496
Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD2, as used in Appeon, Replication Server Messaging Edition RSME, and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a "design vulnerability."...
EUVD-2011-0516
Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD2, as used in Appeon, Replication Server Messaging Edition RSME, and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a "design vulnerability."...
CVE-2011-0497
CVE-2011-0497 —Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace. A crafted request can trigger directory traversal via the sequence "../\" to read arbitrary files. The issue is remote and network-...
CVE-2011-0496
CVE-2011-0496 affects Sybase EAServer 5.x and 6.x up to 6.3 ESD#2 (as used in Appeon, Replication Server Messaging Edition, and WorkSpace). It allows remote attackers to install arbitrary web services and execute arbitrary code, related to a "design vulnerability." The NVD lists a CVSSv2 base sco...
nSense-2010-004: Sybase Afaria
nSense Vulnerability Research Security Advisory NSENSE-2010-004 --------------------------------------------------------------- Affected Vendor: SAP Affected Product: Sybase Afaria 6.0 Platform: Windows Impact: User assisted code execution via CSRF Vendor response: Patch CVE: None Credit: Knud...
SAP Sybase Afaria crossite scripting
Crossite scripting in web administration interface...
Sybase Afaria 6.0 Cross Site Request Forgery
nSense Vulnerability Research Security Advisory NSENSE-2010-004 --------------------------------------------------------------- Affected Vendor: SAP Affected Product: Sybase Afaria 6.0 Platform: Windows Impact: User assisted code execution via CSRF Vendor response: Patch CVE: None Credit: Knud...
PHP-Nuke Search模块SQL注入漏洞
BUGTRAQ ID: 45165 PHP-Nuke是一个广为流行的网站创建和管理工具，可使用很多数据库软件作为后端，如MySQL、PostgreSQL、mSQL、Interbase、Sybase等。 PHP-Nuke的Search模块在实现上存在SQL注入漏洞，攻击者可利用此漏洞控制应用程序，访问或修改数据，利用后台数据库中的潜在漏洞。 此漏洞源于在SQL查询中使用用户提供的数据之前未进行有效过滤。 PHP-Nuke 7.0 - 8.1.0.3.5b 厂商补丁： PHP-Nuke --------...
Sybase PowerDesigner Repository Proxy Detection
The remote service is a Sybase PowerDesigner Repository Proxy, which allows users to issue SQL statements via an ODBC connection to be executed on the database server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...
Sybase Advantage Data Architect Heap Overflow
Exploit Title: Sybase Advantage Data Architect ".SQL" Format Heap Oveflow RCE Date: 2010-10-16 Author: d0lc3 @rmallof - http://elotrolad0.blogspot.com/ Software Link: http://www.sybase.com/products/databasemanagement/advantagedatabaseserver/data-architect-utility Version: 10.0 Tested on: Windows ...
Sybase Advantage Data Architect "*.SQL" Format Heap Oveflow
Exploit for windows platform in category dos / poc =========================================================== Sybase Advantage Data Architect ".SQL" Format Heap Oveflow =========================================================== Exploit Title: Sybase Advantage Data Architect ".SQL" Format Heap...
Sybase Advantage Data Architect - '.SQL' Format Heap Overflow
Exploit Title: Sybase Advantage Data Architect ".SQL" Format Heap Oveflow RCE Date: 2010-10-16 Author: d0lc3 @rmallof - http://elotrolad0.blogspot.com/ Software Link: http://www.sybase.com/products/databasemanagement/advantagedatabaseserver/data-architect-utility Version: 10.0 Tested on: Windows ...
Sybase Advantage Data Architect - .SQL Format Heap Overflow
Sybase Advantage Data Architect - .SQL Format Heap Overflow Exploit Title: Sybase Advantage Data Architect ".SQL" Format Heap Oveflow RCE Date: 2010-10-16 Author: d0lc3 @rmallof - http://elotrolad0.blogspot.com/ Software Link:...
Sybase EAServer 5.2 - Remote Stack Buffer Overflow (Metasploit)
$Id: sybaseeaserver.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Sybase SQL Anywhere Server Suspicious Command Detection
Binary data 5463.prm...
Sybase SQL Anywhere Server Suspicious Command Detection
Binary data 5472.prm...
Sybase ASE Server Suspicious Command Detection
Binary data 5449.prm...