BEA WebLogic Server 8.1 WebLogic Express Administration Console - Cross-Site Scripting

BEA WebLogic Server 8.1 WebLogic Express Administration Console - Cross-Site Scripting source: https://www.securityfocus.com/bid/13400/info A remote cross-site scripting vulnerability affects BEA WebLogic Server and WebLogic Express administration console. This issue is due to a failure of the...

Mailtraq 2.x - Administration Console Privilege Escalation

Mailtraq 2.x - Administration Console Privilege Escalation source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local use...

Mailtraq 2.x - Administration Console Privilege Escalation

source: https://www.securityfocus.com/bid/11708/info Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the administration console interface to...

CVE-2003-0623

Cross-site scripting XSS vulnerability in the Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to inject arbitrary web script via the INIFILE argument...

CVE-2003-0621

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument...

CVE-2003-0622

CVE-2003-0622 affects BEA Tuxedo Admin Console (versions 8.1 and earlier). The vulnerability allows remote attackers to cause a denial of service (hang) by sending pathname arguments containing MS-DOS device names (e.g., CON, AUX). The provided documents confirm the affected product/version and t...

CVE-2003-0623

CVE-2003-0623 describes a cross-site scripting (XSS) vulnerability in the BEA Tuxedo Administration Console (versions 8.1 and earlier). The flaw allows remote attackers to inject arbitrary web script via the INIFILE parameter. The connected documents confirm the affected component and the exploit...

CVE-2003-0621

CVE-2003-0621 affects the BEA Tuxedo Administration Console (8.1 and earlier). The vulnerability arises from the INIFILE argument, where modified paths can cause directory traversal to reveal files outside the web root. Impact is information disclosure; the description does not confirm exploit de...

CVE-2003-0622

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service hang via pathname arguments that contain MS-DOS device names such as CON and AUX...

CVE-2003-0621

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument...

NETGEAR Router Default Password (password) for 'admin' Account

This NETGEAR Router/Access Point has the default password set for the web administration console 'admin'/'password'. This console provides read or write access to the router's configuration. An attacker can take advantage of this to reconfigure the router and possibly re-route traffic...

CVE-2002-1081

The CVE-2002-1081 entry concerns Abyss Web Server 1.0.3. Affected component: the Administration console. Root cause: remote authentication bypass allows reading files by issuing an HTTP request to a target file whose path ends with a "+" character. Impact: unauthorized disclosure of files without...

CVE-2002-1080

The CVE-2002-1080 entry affects Abyss Web Server 1.0.3 prior to Patch 2. Remote attackers can gain privileges and modify server configuration through direct requests to CHL files (srvstatus.chl, consport.chl, general.chl, srvparam.chl, advanced.chl). The available sources confirm the affected pro...

Microsoft IIS 4 (Windows NT) - Remote Web-Based Administration

source: https://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy ISAPI DLL ISM.DLL is left in the /scripts/iisadmin directory...