107 matches found
CVE-2005-1302
SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field...
phpBB <= 2.0.12 Change User Rights Authentication Bypass
No description provided by source. !/usr/bin/perl -w phpBB =2.0.12 session autologin exploit This script uses the vulerability in autologinid variable More: http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=267563 Just gives an user on vulnerable forum administrator rights. You should register the...
CVE-2004-2148
Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors...
CVE-2004-2148
Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors...
DEBIAN-CVE-2004-2148
Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors...
USN-17-1: passwd vulnerability
Martin Schulze and Steve Grubb discovered a flaw in the authentication input validation of the "chfn" and "chsh" programs. This allowed logged in users with an expired password to change their real name and their login shell without having to change their password. This flaw cannot lead to...
PT-1999-1105 · Umapfs · Umapfs
Name of the Vulnerable Software and Affected Versions: umapfs affected versions not specified Description: The issue allows local users to gain root privileges. This is achieved by changing their uid through a malicious mount umap program. Recommendations: At the moment, there is no information...