Sql injection

filter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via a request with an Accounts value for the dbtable parameter, in conjunction with a Password value for the dbfield parameter. NOTE: this has been reported as a SQL injection vulnerability by some...

Trend Micro InterScan Web Security Suite < 3.1 Build 1237 Multiple Flaws

Trend Micro InterScan Web Security Suite is installed on the remote host. The installed version fails to restrict non-admin accounts 'Auditor' and 'Report Only' from modifying system configurations even though these accounts do not have sufficient permissions. C Tenable Network Security, Inc...

CVE-2008-6109

Robin Rawson-Tetley Animal Shelter Manager ASM before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by 1 opening unspecified screens, related to the "double click selector bug"; or modifying a 2 animal, 3 owner, 4...

CVE-2009-0501

Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitive information and conduct "brute force attacks on user accounts" via unknown vectors...

SalesCart - Authentication Bypass

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :SalesCart Product Management Plugin Site :http://www.salescart.com Demo :http://www.salescart.com/scorderdemo/online/default.asp Details :http://www.salescart.com/demo.htm Order Management Plugin Create...

serv-u the default installation of the injection point to read the accounts-vulnerability warning-the black bar safety net

C:\\Program Files\\serv-u\\ServUDaemon. ini and 1=2 union select 1,2,3,4,5,6,7,8,loadfilechar67,58,92,92,80,114,111,103,114,97,109,32,70,105,108,101,115,92,92,115,101,114,118,45,117,92,92,83, 101,114,118, 85,68,97,101,109,111,110,46,105,110,105,1 0,1 1,1 2,1 3,1 4,1 5,1 6,1 7/， Read the serv-u...

CVE-2009-0112

Cross-site request forgery CSRF vulnerability in admin/agentedit.asp in PollPro 3.0 allows remote attackers to create or modify accounts as administrators via the username, password, and name parameters...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/agentedit.asp in PollPro 3.0 allows remote attackers to create or modify accounts as administrators via the username, password, and name parameters...

PHPFootball 1.6 - Remote Hash Disclosure

\n"; exit; else $head .= "GET /$path/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n"; $head .= "Host: $host\r\n"; $head .= "Connection: close\r\n\r\n"; $fsock = fsockopen $host,80; fputs $fsock,$head; while !feof$fsock $cont .= fgets$fsock; fclose$fsock; if pregmatchall"/.+?/",$cont,$i...

PR07-11: Cross-site Request Forgery &#40;CSRF&#41; on Sun Java System Identity Manager

PR07-11: Cross-site Request Forgery CSRF on Sun Java System Identity Manager Date Found: 11th June 2007 Vendor Contacted: 18th June 2007 Date Public: 10th November 2008 Severity: Medium/High Credits: Adrian Pastor and Jan Fry of ProCheckUp Ltd www.procheckup.com. ProCheckUp thanks Sun for working...

DEBIAN-CVE-2008-5113

WordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations, which makes it easier for remote attackers to conduct delayed and persistent cross-site request forgery CSRF attacks via crafted cookies, as demonstrated by attacks that 1 delete user accounts or 2 cause a...

smb-enum-users NSE Script

Attempts to enumerate the users on a remote Windows system, with as much information as possible, through two different techniques both over MSRPC, which uses port 445 or 139; see smb.lua. The goal of this script is to discover all user accounts that exist on a remote system. This can be helpful...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super administrators for requests that create super administrator accounts...

Korean station of the local contains a hole-vulnerability and early warning-the black bar safety net

url: http://www.kptc.or.kr/plaza/law.html?url=/../../../.... root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown...

Sambar Default Accounts

The Sambar web server comes with some default accounts without passwords set. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Immunity Canvas: GOODTECH_SSH

Name| goodtechssh ---|--- CVE| CVE-2008-4726 Exploit Pack| CANVAS Description| Goodtech SSH overflow Notes| CVE Name: CVE-2008-4726 VENDOR: Goodtech Notes: Buffer overflows exist in the following GoodTech SSH server commands:...

DataWizard FTPXQ Default Accounts

The remote FTP server has one or more default test accounts. Description : The version of DataWizard FTPXQ that is installed on the remote host has one or more default accounts setup which can allow an attacker to read and/or write arbitrary files on the system. OpenVAS Vulnerability Test $Id:...

DataWizard FTPXQ Default Accounts

The version of DataWizard FTPXQ that is installed on the remote host has one or more default accounts setup which can allow an attacker to read and/or write arbitrary files on the system. SPDX-FileCopyrightText: 2008 Justin Seitz Some text descriptions might be excerpted from a referenced sources...

WordPress <= 2.6.1 Multiple Vulnerabilities

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

Gentoo Security Advisory GLSA 200501-39 (SquirrelMail)

The remote host is missing updates announced in advisory GLSA 200501-39. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...