2389 matches found
pnews.txt
Admin Access Vulnerability in P-News 1.6 Url: http://www.ppopn.net It is possible to gain admin access if you possess a 'Member' account due to a flaw in the 'p-news.php' file. You can inject an entire arbitrary account, including all the fields, into the 'Name' field, which will push all the...
P-News 1.16 - Administrative Account Creation
P-News 1.16 - Administrative Account Creation source: https://www.securityfocus.com/bid/7689/info A vulnerability has been reported that could enable a P-News member to create and access an administrative account. This is due to insufficient validation of data supplied to account editing input...
P-News 1.16 - Administrative Account Creation
source: https://www.securityfocus.com/bid/7689/info A vulnerability has been reported that could enable a P-News member to create and access an administrative account. This is due to insufficient validation of data supplied to account editing input fields of P-News. This issue was reported in...
CVE-2002-0184: Incorrect Calculation of Buffer Size
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p prompt argument, which are not properly expanded...
CVE-2002-1559
Directory traversal vulnerability in ion-p.exe aka ion-p allows remote attackers to read arbitrary files via 1 C: drive letter or 2 .. dot-dot sequences in the page parameter...
CVE-2002-1559
CVE-2002-1559 describes a directory traversal flaw in ion-p.exe (ion-p) allowing remote attackers to read arbitrary files via the page parameter using C: or .. sequences. The vulnerability is web-facing, with exploitation leading to information disclosure and potential privilege escalation on som...
CVE-2002-0306: Undefined Security Weakness
ans.pl in Avenger's News System ANS 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the p plugin parameter...
