2828 matches found
F5 Device Default Support Password
This F5 Networks system still has the default password set for the support user account. This account normally provides read/write access to the web configuration utility. An attacker could take advantage of this to reconfigure your systems and possibly gain shell access to the system with...
Comersus Backoffice 4.x/5.0/6.0 - '/comersus/database/comersus.mdb' Direct Request Database Disclosure
source: https://www.securityfocus.com/bid/15251/info Comersus BackOfficePlus and BackOfficeLite are prone to multiple input validation and information disclosure vulnerabilities. The applications are prone to SQL injection attacks, information disclosure and multiple cross-site scripting attacks...
CVE-2005-3280
Paros 3.2.5 uses a default password for the "sa" account in the underlying HSQLDB database and does not restrict access to the local machine, which allows remote attackers to gain privileges...
CVE-2005-3280
The CVE-2005-3280 entry concerns Paros 3.2.5, where the underlying HSQLDB database is installed with an empty password for the administrator account ('sa') and the database is accessible over the network. This allows remote attackers to connect to the database and potentially execute arbitrary co...
CVE-2005-3280
Paros 3.2.5 uses a default password for the "sa" account in the underlying HSQLDB database and does not restrict access to the local machine, which allows remote attackers to gain privileges...
CVE-2005-3280: Undefined Security Weakness
Paros 3.2.5 uses a default password for the "sa" account in the underlying HSQLDB database and does not restrict access to the local machine, which allows remote attackers to gain privileges...
CVE-2005-3196
Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges...
CVE-2005-3196
CVE-2005-3196 concerns the Planet Technology Corp FGSW2402RS switch running firmware 1.2, where a default password allows attackers with physical access to the device’s serial port to gain privileges. The affected component is the switch’s firmware authentication mechanism; the root cause is a de...
CVE-2005-3196
Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges...
CVE-2005-3196: Undefined Security Weakness
Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges...
planetBackdoor.txt
Hello all, Today i discovered a pseudo backdoor thru a default password while trying to reset the password on a Planet Technology Corp FGSW2402RS switch. Allthough i dont consider this to be a real problem since the only access seems to be thru the serial port, i would like to share this with the...
Planet Technology Corp FGSW2402RS switch default password / "backdoor"
Hello all, Today i discovered a pseudo backdoor thru a default password while trying to reset the password on a Planet Technology Corp FGSW2402RS switch. Allthough i dont consider this to be a real problem since the only access seems to be thru the serial port, i would like to share this with the...
Use SERV-U to do a backdoor-a vulnerability warning-the black bar safety net
serv-u default monitor 1 2 7. 0. 0. 1:4 3 9 5 8, so only in the present machine to be connected to this management port. serv-u default administrative account is LocalAdministrator,the default password is l@$ak. lk;0@P, this password in the same version is fixed, maybe in different versions is al...
CVE-2005-2998
PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files...
CVE-2005-2998
CVE-2005-2998 affects PHP Advanced Transfer Manager 1.30. The vulnerability involves a default administrator password that allows remote attackers to upload and execute arbitrary PHP files. Impact is described overall as partial confidentiality, integrity, and availability. No explicit remediatio...
CVE-2005-2998
PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files...
CVE-2005-2998: Undefined Security Weakness
PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files...
Brightmail Control Center Default Password (symantec) for 'admin' Account
The remote host is running Symantec's Brightmail Control Center, a web-based administration tool for Brightmail AntiSpam. The installation of Brightmail Control Center on the remote host still has an account 'admin' with the default password 'symantec'. An attacker can exploit this issue to gain...