[VulnWatch] Macromedia Dreamweaver Remote Database Scripts (#NISR05042004B)

NGSSoftware Insight Security Research Advisory Name: Macromedia Dreamweaver Remote Database Scripts Systems Affected: IIS/Dreamweaver MX and UltraDev 4 Severity: Critical Vendor URL: http://www.macromedia.com/ Author: David Litchfield [email protected] Date Vendor Notified: 10th March 2004 Da...

DreamWeaver unauthorized access

Test database is accessible after installation...

New Macromedia Security Zone Bulletin Posted

Security Bulletin MPSB 04-05 Potential Risk in Dreamweaver Remote Database Connectivity Originally posted: April 1, 2004 Last updated: April 1, 2004 Summary: Dreamweaver's remote database connectivity for testing dynamic database-driven websites installs scripts that may reveal DSNs to outside...

MPSB03-05 Patch and Work Around for Dreamweaver MX, DRK, and UltraDev Server Behaviors

In-Reply-To: [email protected] Thank you again for bringing this to the attention of Macromedia. The issues have been resolved. More information and the necessary patches are available at: http://www- staging.macromedia.com/devnet/security/securityzone/mpsb03-05.html MPSB03-...

PHP Authentication Suit for DreamWeaver multiple bugs

Crossite scripting PHP injection...

Macromedia DW MX PHP Authentication Suit Vulnerabilities

------------------- Product: PHP Authentication Suit for DreamWeaver Vendor: Macromedia Versions: VULNERABLE - DreamWeaver MX 6.0 - All the PHP Auth systems created with this - Variables : ALL LIKE accessdenied NOT VULNERABLE - ? --------------------- Description: The PHP User Authentication Suit...

Macromedia Dreamweaver MX 6.0 - PHP User Authentication Suite Cross-Site Scripting

Macromedia Dreamweaver MX 6.0 - PHP User Authentication Suite Cross-Site Scripting source: https://www.securityfocus.com/bid/8339/info It is possible to create an authentication or access control page, using Dreamweaver MX PHP Authentication Suite. This script will generate an error page that...

ColdFusion MX - Remote Development Service

!/usr/bin/perl RDScDump.pl By angry packet THIS IS AN UNPATCHED VULNERABILITY - THIS IS AN UNPATCHED VULNERABILITY ColdFusion 6 MX Server does several things in order to get remote dir structure so we will need to recreate these functions. This is a "almost" complete emulation of a dreamweaver...

ColdFusion MX Remote Development Service Exploit

Exploit for unknown platform in category remote exploits ================================================ ColdFusion MX Remote Development Service Exploit ================================================ !/usr/bin/perl RDScDump.pl By angry packet THIS IS AN UNPATCHED VULNERABILITY - THIS IS AN...

ColdFusion MX - Remote Development Service

ColdFusion MX - Remote Development Service !/usr/bin/perl RDScDump.pl By angry packet THIS IS AN UNPATCHED VULNERABILITY - THIS IS AN UNPATCHED VULNERABILITY ColdFusion 6 MX Server does several things in order to get remote dir structure so we will need to recreate these functions. This is a...

CVE-1999-1271

Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users...

CVE-1999-1271

CVE-1999-1271 concerns Macromedia Dreamweaver, where credentials for FTP are stored with weak encryption. The root cause is weak encryption that enables local users to decrypt other users’ FTP passwords. The entry provides a high-level impact on confidentiality (partial) but does not specify affe...