CVE-2004-1737: Undefined Security Weakness

SQL injection vulnerability in authlogin.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username or 2 password parameters...

CVE-2004-1461

Cisco Secure Access Control Server ACS 3.23 and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address...

CVE-2004-2542

Multiple SQL injection vulnerabilities in Dynix formerly known as epixtech WebPAC allow remote attackers to execute arbitrary SQL commands via unknown attack vectors, resulting in an ability to execute stored procedures, bypass login authentication, and cause an unspecified denial of service to...

CVE-2004-0627

The checkscramble323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string...

CVE-2002-0275

Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via an extra / slash in the requested URL...

CVE-2004-0625

SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page...

FlexWATCH unauthorized access

Authentication can be bypassed...

CVE-2003-1116

The communications protocol for the Report Review Agent RRA, aka FND File Server FNDFS program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing...

NetObserve protection bypass

It's possible to bypass web authentication by using Cookie: login=0...

newsPHP 216 - Authentication Bypass

source: https://www.securityfocus.com/bid/8489/info A vulnerability is reported to exist in newPHP that may allow an attacker to gain access to a vulnerable host due to improper verification of authentication credentials. This issue may be exploited to gain access to sensitive data or perform oth...

CVE-2003-0588

admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password...

Sphera HostingDirector 1.02.03.0 - VDS Control Panel Account Configuration Modification

Sphera HostingDirector 1.02.03.0 - VDS Control Panel Account Configuration Modification source: https://www.securityfocus.com/bid/7896/info Sphera HostingDirector VDS Control Panel has been reported prone to a vulnerability where an attacker may make arbitrary account configuration modifications...

CVE-2003-0217: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Neoteris Instant Virtual Extranet IVE 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script...

CVE-2003-0216

Unknown vulnerability in Cisco Catalyst 7.51 allows local users to bypass authentication and gain access to the enable mode without a password...

CVE-2003-0174: Origin Validation Error

The LDAP name service nsd in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password...

CVE-2002-1413

RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" SSL option during a connection...

CVE-2002-0250

The vulnerability concerns HP AdvanceStack hubs (models J3200A–J3210A) running firmware version A.03.07 or earlier. The Web configuration utility exposes a flaw where an unauthorized user can bypass authentication through a direct HTTP request to the web_access.html page. This bypass allows an at...

CVE-2002-0878

SQL injection vulnerability in the login form for LogiSense software including 1 Hawk-i Billing, 2 Hawk-i ASP and 3 DNS Manager allows remote attackers to bypass authentication via SQL code in the password field...

CVE-2002-1069

The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages 1 release.htm, 2 Device Status, or 3 Device Information...

CVE-2002-0769

The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to 1 obtain the password from the login screen, or 2 reconfigure the adaptor by modifying...