Cpanel 5 and below remote command execution and local root vulnerabilities

Products: Cpanel 5 and below http://www.cpanel.net Date: 19th February 2003 Author: pokleyzz pokleyzzatscan-associates.net Contributors: sk skatscan-associates.net shaharil shaharilatscan-associates.net Special thanks: Skywizard skywizardatmybsd.org.my Description =========== Cpanel is web hostin...

CVE-2002-2093

The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin...

CVE-1999-1393

Powerbook password security bypass (CVE-1999-1393) affects Apple Powerbooks via the Password Security option. With physical access, an attacker can boot from an emergency startup disk and edit the aaaaaaaAPWD flag/file to bypass security. The description notes local access is required and that th...

CVE-2001-0102

CVE-2001-0102: In Mac OS 9, the “Multiple Users” Control Panel allows a normal user to gain Owner privileges by removing the Users & Groups Data File, effectively removing the Owner password and letting the Normal user log in as Owner without a password. This is a local privilege-escalation via d...

Дырка в Mac OS 9 (Multiple Users Control Panel Password)

Удалив файл паролей пользователь может получить доступ с правами администратора...

CVE-2000-1023

The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program...

CVE-2000-1023

The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program...

CVE-2000-1023

CVE-2000-1023 concerns the Alabanza Control Panel. The vulnerability arises because the nsManager.cgi CGI program does not require passwords to access administrative commands, enabling remote attackers to modify domain name information. Connected scan entries (Nessus/OpenVAS) reference this CVE a...

alabanza.txt

Vulnerability: Ability to add/modify domains in name servers of webhosting companies who are reselling for Alabanza. Vendor Contacted: Yes, 09-14-99 - Hole still exists. ========================================================================== Hello everyone, I currently discovered a serious bug...

Alabanza Control Panel 3.0 - Domain Modification

Alabanza Control Panel 3.0 - Domain Modification source: https://www.securityfocus.com/bid/1710/info Alabanza is a web hosting provider that offers automated solutions for virtual domain hosting. A vulnerability exists in the software implemented for automated domain administration. Modification,...

Allmanage.pl Admin Password vulnerability

Allmanage.pl Admin Password vulnerability 15 may 2000 Another allmanage.pl vulnerability see also allmanage.pl.txt Everybody can easily get the admin password from the allmanage directory. You are able to set/change lots of variables, add accounts, mail users, backup, restore, edit header/footer...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 3 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (1)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 1 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...