89 matches found
Secunia Research: TorrentTrader Multiple SQL Injection Vulnerabilities
====================================================================== Secunia Research 18/06/2008 - TorrentTrader Multiple SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...
Design/Logic Flaw
IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428...
CVE-2006-2428
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw sour...
CVE-2006-2428
The CVE-2006-2428 issue affects DUbanner 3.1 (DUware) via the add.asp endpoint, where uploading files with arbitrary extensions (e.g., ASP) can lead to remote code execution. Root cause cited is weak server-side validation/enforcement that can be bypassed by clients. Impact is remote code executi...
CVE-2004-2428
Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, allowing remote attackers to obtain plaintext credentials. No exploitation details or patches are provided in the available documents.
DSquare Exploit Pack: D2SEC_LOTUS_HASH
Name| d2seclotushash ---|--- CVE| CVE-2005-2428 Exploit Pack| D2ExploitPack Description| D2SEC Lotushash Notes|...
CVE-2005-2428
Lotus Domino R5/R6 WebMail with Generate HTML for all fields enabled can reveal sensitive data via names.nsf hidden fields. The connected nuclei template documents information disclosure: password hashes in HTTPPassword, password-change date in HTTPPasswordChangeDate, and client release in ClntBl...
CVE-2004-2428
Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the plaintext username and password...
