Tag
#vulnerability
Ubuntu Security Notice 7038-1 - Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime library. A local attacker could possibly use this issue to read named shared memory segments, potentially exposing sensitive application data.
Ubuntu Security Notice 7036-1 - It was discovered that Rack was not properly parsing data when processing multipart POST requests. If a user or automated system were tricked into sending a specially crafted multipart POST request to an application using Rack, a remote attacker could possibly use this issue to cause a denial of service. It was discovered that Rack was not properly escaping untrusted data when performing logging operations, which could cause shell escaped sequences to be written to a terminal. If a user or automated system were tricked into sending a specially crafted request to an application using Rack, a remote attacker could possibly use this issue to execute arbitrary code in the machine running the application.
Ubuntu Security Notice 7035-1 - It was discovered that the AppArmor policy compiler incorrectly generated looser restrictions than expected for rules allowing mount operations. A local attacker could possibly use this to bypass AppArmor restrictions in applications where some mount operations were permitted.
SchoolPlus version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
School Log Management System version 1.0 suffers from a PHP code injection vulnerability.
School Dormitory Management System version 1.0 suffers from an ignored default credential vulnerability.
Sample Blog Site version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Rupee Invoice System version 1.0 suffers from an arbitrary file upload vulnerability.
Restaurant POS version 1.0 suffers from a remote SQL injection vulnerability.
Responsive Binary mlm version 3.2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.