CVE-2003-1428

CVE-2003-1428 affects Gallery 1.3.3, where directories are created with insecure permissions, allowing local users to read, modify, or delete photos. The provided documents state the insecure permissions as the root cause; no exploit details or fixed version are documented here. References are li...

CVE-2007-1428

SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL commands via the salary parameter...

CVE-2007-1428

CVE-2007-1428 is an SQL injection vulnerability in PHP Labs JobSitePro 1.0, specifically in search.php where the salary parameter is used to build SQL queries. The vulnerability allows remote attackers to potentially manipulate the database (arbitrary SQL commands). The CVSS v2 vector is AV:N/AC:...

CVE-2006-1428

Multiple cross-site scripting XSS vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the fs parameter to 1 mod.php or 2 modprint.php...

CVE-2006-1428

CVE-2006-1428 affects phpCOIN 1.2.2 and earlier. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML through the fs parameter to either mod.php or mod_print.php. The available documents do not provide explo...

CVE-2005-1428

The CVE-2005-1428 entry concerns edit_image.asp in Uapplication Uphotogallery, where remote attackers can upload arbitrary files. The vulnerability enables an attacker to affect confidentiality, integrity, and availability (C/P/I/P), with a CVSSv2 base score of 7.5 (NETWORK vector, low attack com...

CVE-2001-1428

The CVE-2001-1428 entry concerns Beck GmbH IPC@Chip where the FTP and Telnet services ship with a default password, enabling remote attackers to gain unauthorized access. The underlying issue is a default credential disclosure in core services, leading to potential partial confidentiality, integr...

CVE-2004-1428

ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remote attackers to determine valid usernames...

ArGoSoft FTP Server USER Command Account Enumeration

The remote host is running the ArGoSoft FTP Server. The remote version of this software returns different error messages when a user attempts to log in using a nonexistent username or a bad password. An attacker may exploit this flaw to launch a dictionary attack against the remote host in order ...

CVE-2004-1428

ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remote attackers to determine valid usernames...

CVE-2002-1428

index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the usercookie parameter set to 1...

CVE-2002-1428

CVE-2002-1428 affects dotProject 0.2.1.5 (index.php). The vulnerability allows remote attackers to bypass authentication by manipulating a cookie or the URL parameter user_cookie set to 1, enabling unauthorized access to protected areas. The documents do not provide exploit details, affected vers...

CVE-2002-1428

index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the usercookie parameter set to 1...

CVE-1999-1428

The CVE-1999-1428 entry affects Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2. The vulnerability is a local privilege escalation in the Database Manager, which runs with setgid bin privileges; successful exploitation would grant elevated privileges to local users. The underlying issue is t...