LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > LinuxQuestions.org > Linux - News > Syndicated Linux News
User Name
Password
Syndicated Linux News This forum is for the discussion of Syndicated Linux News stories.

Notices

Reply
 
Search this Thread
Old 01-09-2006, 06:01 PM   #1
LXer
LXer NewsBot
 
Registered: Dec 2005
Posts: 73,527

Rep: Reputation: 82
LXer: Adodb Multiple Test Scripts Remote Command Execution ...


Published at LXer:

Two vulnerabilities were identified in ADOdb, which could be exploited by remote attackers to execute arbitrary commands. The first issue is due to an input validation error in the "server.php" test script that does not properly validate the "sql" variable, which could be exploited by attackers to execute arbitrary SQL queries (when the MySQL password for the root user is empty). The second flaw is due to an input validation error in the "tests/tmssql.php" test script that does not properly validate the "do" parameter, which could be exploited by remote attackers to call arbitrary PHP functions.

Read More...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Remote Execution issinho Linux - Networking 5 07-08-2005 01:11 PM
Parallel Execution Capable Scripts? irfanhab Programming 5 08-28-2004 06:04 AM
Execution of PERL scripts in Linux which is compiled in WINDOWs environment to_veera Linux - Software 3 06-18-2004 08:50 AM
Remote Command Execution via mobile phone Sammy2ooo Linux - Software 6 06-27-2003 03:42 AM
Command to list line length of multiple scripts Tekime Linux - General 2 09-06-2002 01:04 AM


All times are GMT -5. The time now is 01:47 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration