CVE-2002-1682

NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts...

CVE-2002-1748

Technical details for CVE-2002-1748 are not publicly available in the provided documents; no specifics on affected versions, root cause, impact, or remediation are given. Monitor for updates as information may be added.

CVE-2002-1691

Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain unauthorized access...

CVE-2002-1748

Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts...

Enterasys Vertical Horizon switches backdoor accounts

There is undocumented backdoor account tiger/tiger123, in addition some privileged control character combination are available to unprivileged user from console or telnet session...

Ultimate PHP Board 1.8/1.9 - Weak Password Encryption

source: https://www.securityfocus.com/bid/13975/info Ultimate PHP Board is prone to a weak password encryption vulnerability. This issue is due to a failure of the application to protect passwords with a sufficiently effective encryption scheme. This issue may allow a malicious user to gain acces...

CVE-2004-1780

Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts...

CVE-2004-1995

Cross-Site Request Forgery CSRF vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm...

CVE-2004-1995

FuseTalk 2.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that lets remote attackers create arbitrary user accounts via a request to adduser.cfm. The issue is tied to the adduser.cfm endpoint and is described in multiple sources (including PT-2004-2891) as enabling account cre...

CVE-2005-1316

Cross-site scripting XSS vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-0248

The Solaris Management Console SMC GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts...

CVE-2005-1316

Cross-site scripting XSS vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1316

The CVE-2005-1316 entry documents a cross-site scripting (XSS) vulnerability in the Horde Accounts module for Horde, present before version 2.1.2. The issue allows remote attackers to inject arbitrary script or HTML via the parent’s frame page title. Affected software: Horde Accounts module prior...

Horde Accounts < 2.1.2 Parent Frame Page Title XSS

Binary data 2854.prm...

[SA15038] netMailshar Professional Two Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: netMailshar Professional Two Vulnerabilities SECUNIA...

DeluxeFTP FTP client weak permissions

FTP sites accounts are stored in world readable file...

WebCT 4.1 vulnerable to XSS attacks

The discussion board feature of WebCT is vulnerable to XSS. Here is the proof of concept: When you are composing a new message, in the message field of the form, type this: /pretable background=javascript:alert"XSS Warning" /table Then submit the message. You should see a JavaScript alert box tha...

phpBB 2.0.x - Authentication Bypass (3)

source: https://www.securityfocus.com/bid/12678/info phpBB is affected by an authentication bypass vulnerability. This issue is due to the application failing to properly sanitize user-supplied input during authentication. Exploitation of this vulnerability would permit unauthorized access to any...

CVE-2004-1703

Fusion News 3.6.1 is affected. A remote attacker can add user accounts if the administrator is logged in by embedding an img bbcode tag in a comment that calls index.php with the signup action, which executes when the administrator’s browser loads the page containing the img tag. This is due to t...

CVE-2005-0248

The Solaris Management Console SMC GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts...