CVE-2013-0155

CVE-2013-0155 affects Ruby on Rails, specifically Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11. The vulnerability arises from mismatched parameter handling between Active Record and the JSON implementation, allowing remote attackers to bypass database-query restrictions...

rubygem-activerecord: Unsafe Query Generation Risk in Ruby on Rails

Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NU...

rubygem-activerecord: Unsafe Query Generation Risk in Ruby on Rails

Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NU...

rubygem-activerecord: SQL injection when processing nested query paramaters

The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query...

CVE-2012-4949: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service...

CVE-2011-5183

Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL commands via the whereclause parameter to 1 index.php, 2 indexlong.php, or 3 indexshort.php in ordering/interfacecreator/...

PT-2012-2160

Name of the Vulnerable Software and Affected Versions OrderSys versions 1.6.4 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the where clause parameter to API endpoints such as "index.php", "index long.php", or "index short.php" i...

IBM solidDB 6.5 < 6.5.0.8 Interim Fix 6 Redundant WHERE Clause Select Statement Parsing Remote DoS

According to its version number, the solidDB install on the remote host is affected by a denial of service vulnerability due to a flaw in the way the application handles 'SELECT' statements containing a redundant WHERE condition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2012-0200: Undefined Security Weakness

The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users to cause a denial of service daemon crash via a SELECT statement with a redundant WHERE condition...

PT-2012-2396

Name of the Vulnerable Software and Affected Versions IBM solidDB version 6.5 before Interim Fix 6 Description The issue is related to the improper initialization of data structures in the server. This allows remote authenticated users to cause a denial of service, resulting in a daemon crash. Th...

IBM solidDB 6.5.0.8 - SELECT Statement WHERE Condition Denial of Service

IBM solidDB 6.5.0.8 - SELECT Statement WHERE Condition Denial of Service source: https://www.securityfocus.com/bid/52111/info IBM solidDB is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. IBM...

IBM solidDB 6.5.0.8 - 'SELECT' Statement 'WHERE' Condition Denial of Service

source: https://www.securityfocus.com/bid/52111/info IBM solidDB is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. IBM solidDB versions prior to 6.5.0.8 Interim Fix 6 are vulnerable. SELECT FROM ...

PT-2011-5133

Name of the Vulnerable Software and Affected Versions SugarCRM versions 6.1 through 6.1.6 SugarCRM versions 6.2 through 6.2.3 SugarCRM versions 6.3 through 6.3.0RC2 SugarCRM versions 6.4 through 6.4.0beta0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is...

CVE-2011-4833: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.3.0RC3, and 6.4 before 6.4.0beta1 allow remote attackers to execute arbitrary SQL commands via the 1 where and 2 order parameters in a getfulllist action to index.php...

Альтернативный LIMIT

Затравка. Приведу альтернативу LIMIT, когда в url нельзя использовать символы: пробел,,',/,% Из-за ограничений отпадают альтернативные пробелы %09,%0A,... и //. Остается альтернативный синтаксис с использованием скобок. Но синтаксис limit не позволяет даже их: Код: ... limit1,100 -- error...

DEBIAN-CVE-2010-4652

Heap-based buffer overflow in the sqlpreparewhere function contrib/modsql.c in ProFTPD before 1.3.3d, when modsql is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly...

PT-2011-1618

Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.3d Description The issue is related to a heap-based buffer overflow in the sql prepare where function, which can be exploited when mod sql is enabled. This occurs because substitution tags in a crafted username ar...

PT-2011-2523

Name of the Vulnerable Software and Affected Versions PHPCMS 2008 V2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the where time parameter in a 'get' action, specifically targeting the data.php file. Recommendations For PHPCMS 2008 V2,...

CVE-2009-4979: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in search.php in Photokorn Gallery 1.81 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 where, 2 sort, 3 order, and 4 Match parameters...

MySQL拒绝服务和客户端证书校验漏洞

MySQL是一款流行的数据库服务程序。 MySQL存在多个安全漏洞，恶意攻击者可以进行拒绝服务和伪造攻击。 -链接OpenSSL库的MySQL客户端包含的"vioverifycallback"函数存在错误，MySQL服务器如果使用深度为零的证书，攻击者可以进行中间人攻击。 -对在WHERE子句中包含子查询的"SELECT"缺少错误处理和指派一个SELECT结果给用户变量，这个结果可导致服务程序崩溃。 -当处理Geometry值作为第一个参数时"GeomFromWKB"函数不正确保留参数的空值标记，可导致服务程序崩溃。 MySQL 5.x MySQL...