The vulnerability allows an attacker to inject sql commands into the vulnerable parameters such as 'cmd', 'type', 'mod_id', 'category', 'aid', 'parent' etc.
The vulnerability allows an attacker to inject sql commands by exploiting the vulnerable parameters in viewuserips.php and editadminuser.php files.
The vulnerability allows an attacker to inject sql commands into the 'key' parameter of the 'index.php' page, allowing for the execution of arbitrary SQL commands.
The vulnerability allows an attacker to inject sql commands. Proof of Concept: http://localhost/[PATH]/index.php?page=static_pages&key=[SQL]
The vulnerability allows an attacker to inject sql commands into the vulnerable parameter 'id' of the 'item.php' page.
The vulnerability allows an attacker to inject sql commands into the 'key' parameter of the 'index.php' page, which can be used to access or modify data in the back-end database.
The vulnerability allows an attacker to inject sql commands. Proof of Concept: http://localhost/[PATH]/index.php?page=static_pages&key=[SQL] '+/*!00007uNiOn*/+/*!00007SelEct*/+0x283129,0x283229,0x3c68313e496873616e2053656e63616e3c2f68313e,(/*!50000Select*/+export_set(5,@:=0,(/*!50000select*/+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,/*!50000table_name*/,0x3c6c693e,2),/*!50000column_name*/,0xa3a,2)),@,2))--+-
The vulnerability allows an attacker to inject sql commands. Proof of Concept: http://localhost/[PATH]/admin User: 'or 1=1 or ''=' Pass: anything http://localhost/[PATH]/admin/viewuserips.php?id=[SQL] http://localhost/[PATH]/admin/editadminuser.php?id=[SQL] Etc..
When the code generator meets (a) in the given JS code, it will call BytecodeGenerator::emitGetByVal. The method uses op_get_by_val to handle expressions like "o[i]". But, there is a fast path, which uses op_get_direct_pname, for when the index variable is a string. op_get_direct_pname is designed for a string index only. So if other types are used as indexes, it will cause type confusions. In the above JSC code, the index variable is an object, which will cause type confusion.
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Jungo WinDriver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x95382673 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel. This exploit uses a data only attack via the Quota Process Pointer Overwrite technique. We smash the token's _SEP_TOKEN_PRIVILEGES->Enabled and dec the controlled address by 0x50 (size of the Mutant) to enable SeDebugPrivilege's. Then we inject code into a system process.
Services By CQR