CVE-2012-1741

Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to User Administration Pages...

PT-2012-3493

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 10.1.3.5 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related to User Administration Pages. Recommendations For Oracle Fusion Middlewa...

CVE-2012-1741: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to User Administration Pages...

PHPCollab 2.5 Unauthenticated Access

Date: 3/5/2012 Author: team ' and 1=1-- Software Link: http://www.phpcollab.com/ Version: 2.5 Vulnerability was found during the AthCon IT Security Conference CTF CTF organizer: echothrust We identified that the PhpCollab application installed under http://192.0.0.2/phpcollab/ allows the...

Cisco Digital Media Manager privilege escalation

It's possible to access administration pages by URLs...

PT-2011-3937

Name of the Vulnerable Software and Affected Versions Cisco Show and Share versions 52, 5.21, and 5.22 before 5.22.1 Description The issue allows remote attackers to access administration pages, including Encoders and Pull Configurations, Push Configurations, Video Encoding Formats, and...

CVE-2011-2584: Undefined Security Weakness

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote attackers to access the 1 Encoders and Pull Configurations, 2 Push Configurations, 3 Video Encoding Formats, and 4 Transcoding administration pages, and cause a denial of service live event outage or obtain potentially sensitive...

CVE-2010-2448: Undefined Security Weakness

znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service crash by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using 1 a traffic link in the web administration pages o...

CVE-2010-2030

Cross-site scripting XSS vulnerability in the External Link Page module 5.x before 5.x-1.0 and 6.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the administration and redirect pages...

CVE-2010-2030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the External Link Page module 5.x before 5.x-1.0 and 6.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the administration and redirect pages...

Vulnerabilities in Unified Contact Center Express Administration Pages

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2008-0823

Unspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote attackers to access the administration pages via unknown attack vectors...

CVE-2008-0823

Unspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote attackers to access the administration pages via unknown attack vectors...

CVE-2008-0823: Improper Authentication

Unspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote attackers to access the administration pages via unknown attack vectors...

SA-2008-017 - Header image - Access bypass

The Header image module allows sites to display an image on selected pages based on the node id, path, taxonomy, node type, containing book or the result of PHP code. The module contains a vulnerability where access to the module's administration pages is granted to any user, including the...

AliceGate 2 ADSL WiFI routers unauthorized access

It's possible to access few administration pages, including WiFi encryption configuration, without authentication...

Papoo 1.0.3 - Plugin.php Authentication Bypass

Papoo 1.0.3 - Plugin.php Authentication Bypass source: https://www.securityfocus.com/bid/24634/info Papoo is prone to an authentication-bypass vulnerability because the application fails to check user privileges when accessing the administration pages. An attacker can exploit this issue to gain...

Papoo 1.0.3 - 'Plugin.php' Authentication Bypass

source: https://www.securityfocus.com/bid/24634/info Papoo is prone to an authentication-bypass vulnerability because the application fails to check user privileges when accessing the administration pages. An attacker can exploit this issue to gain access to administration plugins. This may lead ...