Improper authentication checking in Alan Ward Acart

Vulnerability: Improper authentication checking for delete Discussion: Due to improper authentication checking a pop-up opened by any of the multiple XSS vulnerabilities by the admin of the site can cause a database compromise. Exploit: By using one of the multiple XSS vulnerabilities in this...

CVE-2002-2066

BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

XGB 1.2 - Remote Form Field Input Validation

XGB 1.2 - Remote Form Field Input Validation source: https://www.securityfocus.com/bid/4515/info xGB is guestbook software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems. xGB does not sufficiently validate input that is supplied v...

CVE-2000-1161

CVE-2000-1161 concerns AdCycle banner management: the build.cgi CGI is left in a web-accessible directory, enabling remote attackers to execute the program and access or delete the AdCycle databases. Connected sources corroborate the issue and describe a remediation: remove build.cgi from /cgi-bi...