Oracle Application Server 10G ORA_DAV Basic Authentication Bypass Vulnerability

Affected Software/Device: Oracle Application Server Portal Vulnerability: Authentication Bypass Tested Version: 10G Risk: Medium Description: Oracle Application Server Portal OracleAS Portal is a Web-based application for building and deploying portals. It provides a secure, manageable environmen...

oracleasp-bypass.txt

Affected Software/Device: Oracle Application Server Portal Vulnerability: Authentication Bypass Tested Version: 10G Risk: Medium Description: Oracle Application Server Portal OracleAS Portal is a Web-based application for building and deploying portals. It provides a secure, manageable environmen...

PostCard 1.0 Remote Insecure Cookie Handling Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ PostCard 1.0 Insecure Cookie Handling Arbitrary Authentication +==-- --==+================================================================================+==--...

Sad Raven's Guestbook версии 1.2 vuln

Приветствую! Если вам интересно, то я обнаружил уязвимость в Sad Raven's Guestbook версии 1.2. Она заключается в следующем: если установить на свою машину правильно составленный cookie, то можно войти в админский интерфейс, с частичным обходом авторизации! Кукис должен быть следующего формата: na...