9344 matches found
Несанкционированный доступ в GeekLog (unauthorized access)
Изменив куки можно получить доступ под UID другого пользователя...
Дырки в Ultimate Bulletin Board (javascript, cookie)
Можно вставить javascript в таг IMG, кроме того при проверке куки не проверяется пароль пользователя...
CSS vulnerabilities in YaBB and UBB allow account hijack [Multiple Vendor]
Advisory Title: CSS vulnerabilities in YaBB and UBB allow account hijack Multiple Vendor Release Date: 08/01/2002 Application: YaBB and UBB Platform: Any system supporting PERL. Build - YaBB : 1 Gold - Service Pack 1 - older versions were effected in the same way. UBB : Ultimate Bulletin BoardTM...
PT-2001-2621 · Unknown · Autogalaxy
Name of the Vulnerable Software and Affected Versions: Autogalaxy affected versions not specified Description: The issue allows remote attackers to obtain authentication information and gain unauthorized access. This is possible because Autogalaxy stores usernames and passwords in cleartext in...
Слабое шифрование в PHP-Nuke (weak encryption)
Вместо исопльзование сеансовых cookie, cookie содержат пароль администратора в base64...
CVE-2001-0723
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulnerability."...
Вставка скриптов в URL в Horde IMP (crossite scripting)
Вставив скрипт в URL можно получить доступ к сеансовым cookie...
Доступ к HTTP-cookie через FTP в Mozilla (unauthorized access)
К cookie установленным через http можно получть доступ через FTP, что может вызвать проблемы с безопасностью...
Accessing cookies via ftp
Topic: accessing cookies via ftp Affected Software: all versions of Netscape/Mozilla Author: 3APA3A Risk: Low Remotely Exploitable: Yes Impact: depending on server configuration cookie set by server can be retrieved by hostile side from client Vendor URL: http://www.mozilla.org SECURITY.NNOV...
CVE-2001-0972
Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie UserID 1, i.e. "0888888."...
PT-2001-1735 · Openssh +1 · Openssh +1
Name of the Vulnerable Software and Affected Versions: OpenSSH versions 2.9 and earlier Description: The issue allows a local attacker to delete any file named 'cookies' via a symlink attack when X forwarding is enabled. Recommendations: For OpenSSH versions 2.9 and earlier, consider disabling X...
CGIWrap 2.x3.x - Cross-Site Scripting
CGIWrap 2.x3.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/3081/info CGIWrap is a free, open-source program for running CGI securely. CGIWrap does not filter embedded scripting commands from user-supplied input. A web user may submit a malicious link into any form which...
CVE-2001-1086
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack...
Sun HotJava Browser 3 - Arbitrary DOM Access
source: https://www.securityfocus.com/bid/1837/info A malicious website operator may be able to obtain cookies from a target system browsing with Sun HotJava Browser. The Document Object Model DOM of arbitrary URLs can be accessed if a specially formed javascript is launched from a named window...
ASPR #2000-07-22-1: Remote Retrieval Of IIS Session Cookies From Web Browsers
=====BEGIN-ACROS-REPORT===== ========================================================================= ACROS Security Problem Report 2000-07-22-1-PUB ------------------------------------------------------------------------- Remote Retrieval Of IIS Session Cookies From Web Browsers...
Microsoft Internet Explorer 5.5 ASCII equivalent of "%01" security vulnerability....
The following security vulnerability has been found in Microsoft Internet Explorer version 5.5 When "" an undisplayable character, which is eaqual to the 1st caharacter in ASCII table - after the 0th... inserted in some strategic position in Javascript code ,it is possible to access to local fil...
snoop.servlet.txt
LoWNOISE Snoop Servlet Tomcat 3.1 and 3.0 ====PRODUCT: Snoop Servlet on Release Build 3.1 and 3.0 of Tomcat from Apache Software Foundation. http://jakarta.apache.org ====PROBLEM: The Snoop Servlet will give you too much info PATHs, OS, etc. ====EXPLOIT:...
cache-control.txt
executive summary HTTP cache-control headers such as If-Modified-Since allow servers to track individual users in a manner similar to cookies, but with less constraints. This is a problem for user privacy against which browsers currently provide little protection. problem statement Alice is...
CVE-1999-0241
The provided connected documents confirm CVE-1999-0241 affects X Windows (X11) with a vulnerability in the authentication cookies: guessable magic cookies allow remote attackers to execute commands (e.g., via xterm). Root cause is guessable, enabling remote command execution with no authenticatio...
