[Full-disclosure] [vuln.sg] Cybozu Garoon 2 SQL Injection Vulnerabilities

vuln.sg Vulnerability Research Advisory Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary ------- Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL...

CVE-2006-4347

SQL injection vulnerability in user logon authentication request handling in CoolCoolD.exe in Cool Manager 5.0 5,60,90,28 and Cool Messenger Office/School Server 5.5 5,65,12,13 allows remote attackers to execute arbitrary SQL commands via the username field...

Eskolar CMS 0.9.0.0 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Eskolar CMS 0.9.0.0 Remote Blind SQL Injection Exploit ======================================================...

Eskolar CMS 0.9.0.0 - Blind SQL Injection

Eskolar CMS 0.9.0.0 - Blind SQL Injection ================================================================================================== !/usr/bin/perl use IO::Socket; ==================================================================================================...

Eskolar CMS 0.9.0.0 Remote Blind SQL Injection Exploit

No description provided by source. ================================================================================================== !/usr/bin/perl use IO::Socket; ==================================================================================================...

Juniper Networks DX crossite scripting

It's possible to injecty scripts via logon fields into system log entry viewable through web interface...

CVE-2006-3205

Ultimate PHP Board UPB 1.9.6 and earlier allows remote attackers to gain access via modified userenv, passenv, powerenv, and idenv parameters in a cookie, which comprise a persistent logon that does not vary across sessions...

PT-2006-4100 · Upb · Ultimate Php Board

Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB versions 1.9.6 and earlier Description: The issue allows remote attackers to gain access by modifying certain parameters in a cookie. These parameters, including user env, pass env, power env, and id env, can be exploit...

CVE-2006-3205: Undefined Security Weakness

Ultimate PHP Board UPB 1.9.6 and earlier allows remote attackers to gain access via modified userenv, passenv, powerenv, and idenv parameters in a cookie, which comprise a persistent logon that does not vary across sessions...

Windows Software Restriction Policy Protection Bypass

Windows Software Restriction Policy Protection Bypass Class: Protection bypass Vector: Local Tested on: Windows XP SP2, Windows Server 2003 SP1 Risk: Low Remark: I don't know, what is it - bug or feature, but I can't find any documentation on this issue. Description: Software Restriction Policies...

Authentication flaw

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...

CVE-2006-2206

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...

CVE-2006-2206

The CVE-2006-2206 entry concerns UltraVNC 1.0.1 whose MS-Logon scheme uses weak XOR encryption for challenge/response. This weak cryptography permits an attacker on the network to sniff credentials and decrypt passwords, enabling privilege escalation.

Vulnerability in the way [email protected] handles MS-Logon Authentication.

AGR IT Advisory May 2, 2006 AGR-ADV-2006-01 TITLE: Vulnerability in the way [email protected] handles MS-Logon Authentication. Overview Deon Force discovered a vulnerability in Ultr@VNC 1.0.1 and earlier versions with MS-Logon I and MS-Logon II authentication that may allow attackers to crack the...

CVE-2006-2206: Undefined Security Weakness

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...

CVE-2006-1788

Adobe Document Server for Reader Extensions 6.0, during log on, provides different error messages depending on whether the user ID is valid or invalid, which allows remote attackers to more easily identify valid user IDs via brute force attacks...

Microsoft Commerce Server 2002: Logon as known user with a false password

Microsoft Commerce Server 2002: Logon as known user with a false password Vulnerable: Microsoft Windows Server 2000/2003 + Internet Information Server 5/6 + Commerce Server 2002 Discussion: Microsoft Commerce Server is used by company's who want to give customers the opportunity to change there o...

CVE-2005-4664

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662...

CVE-2005-4664: Undefined Security Weakness

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662...

ASPKnowledgebase vulnerable to SQL-inject

ASPKnowledgebase found at: http://www.asp-programmers.com/download-freeware.asp, does not properly sanitise it's admin logon fields. Therefore an SQL-inject will bypass the entire authentication process, giving you administrative rights. PoC of SQL could be 1'or'1'='1 on the admin logon page:...