516 matches found
CVE-2006-7191
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager LAM before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program...
DEBIAN-CVE-2007-1840
lib/modules.inc in LDAP Account Manager LAM before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting XSS...
CVE-2006-7191
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager LAM before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program...
CVE-2007-1840
lib/modules.inc in LDAP Account Manager LAM before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting XSS...
CVE-2006-7191
The CVE-2006-7191 vulnerability affects LDAP Account Manager (LAM) via lamdaemon.pl, where an untrusted PATH can let local users execute a malicious rm and gain privileges. Public advisories (DSA-1287-1 for Debian) confirm the issue and provide remediation by upgrading ldap-account-manager to a f...
CVE-2007-1840
The CVE-2007-1840 issue affects ldap-account-manager (LAM) prior to 1.3.0, specifically the lib/modules.inc handling of LDAP data. The vulnerability arises from HTML special characters not being escaped, which can enable a cross-site scripting (XSS) type impact in the victim’s browser in the cont...
CVE-2006-7191
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager LAM before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program...
CVE-2007-1840
lib/modules.inc in LDAP Account Manager LAM before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting XSS...
The system security of the empty password to enter the WINDOWS2000-vulnerability warning-the black bar safety net
WINDOWS200 where winnt\System32\Config under the SAM file that account password database file, it save the WINDOWS2000 of all the username and password when you log in, the system will put the username and password you enter with the SAM file in the encrypted data proofreading, and if they...
iDEFENSE Security Advisory 10.31.02c: PHP-Nuke SQL Injection Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 10.31.02c: http://www.idefense.com/advisory/10.31.02c.txt PHP-Nuke SQL Injection Vulnerability October 31, 2002 I. BACKGROUND "PHP-Nuke is a news automated system specially designed to be used in Intranets and Internet. The...
CVE-2000-0689
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter...
CVE-2000-0688
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter...
CVE-2000-0689
CVE-2000-0689 affects Account Manager LITE. The vulnerability arises because authentication is not properly enforced when attempting to change the administrator password via the amadmin.pl script with the setpasswd parameter, allowing remote attackers to gain privileges. The connected documents c...
CVE-2000-0689
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter...
Account Manager CGI Vulnerability
Product: Account Manager Versions: ALL including LITE and PRO haven't been able to test ENTERPRISE OS: Unix and Winnt Vendor: Notified, http://www.cgiscriptcenter.com/ The Problem: The Script allows any remote user access to the Administration Control Panel through overwriting the Admin Password...