2193 matches found
CVE-2004-1400
The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unauthorized access via a direct request to main.asp...
CVE-2004-0261
oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter...
Helm Control Panel < 3.1.20 Multiple Input Validation Vulnerabilities
Binary data 2390.prm...
WpQuiz Gain Admin Rightd Exploit found
Ok so here is what I found Authors website wireplastik.com currently down php script I found exploit in wpquiz version 2.60b8 also tested on 2.60b 1-7 Exploit: by default wpquiz comes with a folder called extras. This folder is not password protected nor does it require any sort of authentication...
Jaws 0.4: authentication bypass
///////////////////////////////////////////////////// //// Vulnerable Program: JAWS //// //// Version : 0.4 //// //// Url: http://www.jaws.com.mx //// //// The Bug: SQL injection to allows bypass the auth. //// //// Date: Today, July 28 off 2004 //// //// Author: Fernando Quintero a.k.a nonroot...
EMule Web 0.42 Control Panel - Denial of Service
source: https://www.securityfocus.com/bid/10317/info It has been reported that eMule's Web Control Panel is susceptible to a remote denial of service vulnerability. This issue is reportedly triggered by sending malformed requests to the web interface. Upon processing malformed requests, the...
EMule Web 0.42 Control Panel - Denial of Service
EMule Web 0.42 Control Panel - Denial of Service source: https://www.securityfocus.com/bid/10317/info It has been reported that eMule's Web Control Panel is susceptible to a remote denial of service vulnerability. This issue is reportedly triggered by sending malformed requests to the web...
More Cpanel Vuls (cross site scripting)
Advisory Name: More Cpanel Vuls cross site scripting Discovered by: Fable Greets: 0x29A Crew, !AM Crew, Atomix, d3thstar, mgrd, rootthief.com. Version Tested On: cPanel Build 9.1.0-STABLE 93 Most likely effects more Description cPanel & WebHost Manager WHM is a next generation web hosting control...
Invision Power Board (IP.Board) 1.3 - SQL Injection
Invision Power Board IP.Board 1.3 - SQL Injection IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: = 1.3 Website: http://www.invisionboard.com/ BID: 9810 Description: Invision Power Board IPB is a professional forum system that has been built from the ground up wi...
Open Journal Blog Authenticaion Bypassing Vulnerability
Open Journal Blog Authenticaion Bypassing Vulnerability ================================================= PROGRAM: Open Journal HOMEPAGE: http://www.grohol.com/downloads/oj/ VULNERABLE VERSIONS: 2.5 and below DESCRIPTION ================================================= OpenJournal is a completel...
openjournal2.5.txt
Open Journal Blog Authenticaion Bypassing Vulnerability ================================================= PROGRAM: Open Journal HOMEPAGE: http://www.grohol.com/downloads/oj/ VULNERABLE VERSIONS: 2.5 and below DESCRIPTION ================================================= OpenJournal is a completel...
[Full-Disclosure] Sun Cobalt RaQ Control Panel Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sun Cobalt RaQ Control Panel Multiple Vulnerabilities - ------ PRODUCT: Cobalt RaQ Web Control Panel VENDOR: Sun - Cobal Networks VULNERABLE VERSIONS: - Sun Cobalt RaQ Servers Web Control Panel T.I.N.P - Tested in a default configurated Sun Cobalt RaQ...
CVE-2003-0522
Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to 1 gain access to the admin control panel via the idadmin parameter to login.asp or 2 gain other privileges via the Email parameter to Custva.asp...
CVE-2003-0522
CVE-2003-0522 corresponds to multiple SQL injection vulnerabilities in ProductCart versions 1.5–2.0. The affected components include login.asp (admin access via the idadmin parameter) and Custva.asp (privilege escalation via the Email parameter). The underlying issue is SQL injection that enables...
bosen-adv.7.txt
$Id: bosen-adv.7,v1 25/06/2003 bosen Exp $ 1ndonesian Security Team 1st Bosen Advisory 7 ProductCart SQL Injection 25/06/2003 ProductCart SQL Injection Vulnerability 1ndonesian Security Team 1st http://bosen.net/releases/...
PABox 1.6 - Password Reset
source: https://www.securityfocus.com/bid/8067/info paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel...
Sphera Hosting Director Control Panel Multiple Vulnerabilities: XSS-Session Hijacking-DoS/Buffer Overflow-Another User Accounts access
-------------------- Product: SPHERA HostingDirector and Final User VDS Control Panel Hosting Control Panel Vendor: SPHERA Versions: VULNERABLE - 3.x - 2.x - 1.x NOT VULNERABLE - ? --------------------- Description: HostingDirector comprises three fundamental components that are integrated to...
Sphera HostingDirector 1.0/2.0/3.0 - VDS Control Panel Account Configuration Modification
source: https://www.securityfocus.com/bid/7896/info Sphera HostingDirector VDS Control Panel has been reported prone to a vulnerability where an attacker may make arbitrary account configuration modifications. It has been reported that an attacker, may connect to the HostingDirector server and...
PSOFT H-Sphere Cross Site Scripting Vulnerabilities
-------------------- Product: PSOFT H-Sphere Hosting Control Panel Vendor: PSOFT Positive Software Corporation Versions: VULNERABLE - 2.3.x - 2.2.x - 2.1.x - 2.0.x NOT VULNERABLE - ? --------------------- Description: H-Sphere is a scalable multiserver webhosting control panel, which provides...
H-Sphere 2.x - HTML Template Inclusion Cross-Site Scripting
H-Sphere 2.x - HTML Template Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/7855/info H-Sphere is prone to multiple cross-site scripting vulnerabilities via the HTML template feature in the Hosting Control Panel. HTML and script code will not be filtered from pages which...