Inadequate escaping leads to SQL injection vulnerability.
Joomla! CMS versions 3.1.0 through 3.2.2
Upgrade to version 3.2.3
The JSST at the Joomla! Security Center.
(Aug 21) Two security issues (SQL injection and command line injection via SNMP settings) were found in Cacti, a web interface for graphing of monitoring systems. [More…]
(Aug 2) It was discovered that otrs2, the Open Ticket Request System, does not properly sanitise user-supplied data that is used on SQL queries. An attacker with a valid agent login could exploit this issue to craft SQL queries by injecting arbitrary SQL code through manipulated URLs. [More…]
(Feb 20) Sumit Soni discovered that PostgreSQL,an object-relational SQL database, could be forced to crash when an internal function was called with invalid arguments, resulting in denial of service. [More…]
(Jan 22) An input sanitation problem has been found in upgrade functions of movabletype-opensource, a web-based publishing platform. Using carefully crafted requests to the mt-upgrade.cgi file, it would be possible to inject OS command and SQL queries. [More…]
(Jan 16) An interpretation conflict can cause the Active Record component of Rails, a web framework for the Ruby programming language, to truncate queries in unexpected ways. This may allow attackers to elevate their privileges. [More…]
(Jan 9) It was discovered that Rails, the Ruby web application development framework, performed insufficient validation on input parameters, allowing unintended type conversions. An attacker may use this to bypass authentication systems, inject arbitrary SQL, inject and [More…]
(Nov 15) Several vulnerabilities were discovered in TYPO3, a content management system. This update addresses cross-site scripting, SQL injection, and information disclosure vulnerabilities and corresponds to TYPO3-CORE-SA-2012-005. [More…]
(Sep 6) It was discovered that Zabbix, a network monitoring solution, does not properly validate user input used as a part of an SQL query. This may allow unauthenticated attackers to execute arbitrary SQL commands (SQL injection) and possibly escalate privileges. [More…]
(Aug 25) Two vulnerabilities related to XML processing were discovered in PostgreSQL, an SQL database. CVE-2012-3488 [More…]
The following bugs have been fixed:
[-] SQL injection vulnerability that allows anonymous attacker remotely compromise Plesk server has been fixed.
The following bugs have been fixed:
[-] SQL injection vulnerability that allows anonymous attacker remotely compromise Plesk server has been fixed.
The following bugs have been fixed:
[-] SQL injection vulnerability that allows anonymous attacker remotely compromise Plesk server has been fixed.
The following bugs have been fixed:
[-] SQL injection vulnerability that allows anonymous attacker remotely compromise Plesk server has been fixed.
The following bugs have been fixed:
[-] SQL injection vulnerability that allows anonymous attacker remotely compromise Plesk server has been fixed.
Plesk Service Team is pleased to present you Parallels Plesk Panel Database Scheme Poster.
You can find the detailed structure of Plesk database and use it to eliminate possible database inconsistencies and to better understand internal relationship between objects. Using this scheme requires a good familiarity with the syntax of SQL queries and skills in database administration.
Please share your experience and opinion in corresponding thread on Parallels forum http://forum.parallels.com/showthread.php?t=210218
[-] SQL injection vulnerability has been fixed.
[-] SQL injection vulnerability has been fixed.
[-] SQL injection vulnerability has been fixed.
[-] SQL injection vulnerability has been fixed.
Plesk Panel 10.0.1 MU#7 for Linux and Windows – security fixes – is available since June 9, 2011 through the Autoinstaller
[-] phpMyAdmin XSS vulnerability http://www.securityfocus.com/bid/47945/info.
[-] SQL injection at subscription’s owner changing in Plesk Panel.
[-] Horde XSS injection.
[-] Multiple XSS vulnerabilities in Plesk Panel.
[-] sw-cp-server can be crashed by client certificate.
Plesk Panel 10.1.1 MU#15 for Linux and Windows – security fixes – is available since June 9, 2011 through the Autoinstaller
[-] phpMyAdmin XSS vulnerability http://www.securityfocus.com/bid/47945/info.
[-] SQL injection at subscription’s owner changing in Plesk Panel.
[-] Horde XSS injection.
[-] Multiple XSS vulnerabilities in Plesk Panel.
[-] sw-cp-server can be crashed by client certificate.
52 queries. 9 mb Memory usage. 0.672 seconds.