Authentication flaw

Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6854

Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6854

Xigla Software Absolute FAQ Manager.NET 6.0 is affected by an authentication bypass vulnerability: remote attackers can gain administrative access by setting a specific cookie value. Root cause is improper cookie handling that bypasses login. Impact is unauthorized admin access; exact remediation...

CVE-2008-6854

Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

phpMyFAQ Detection

This host is running phpMyFAQ, an open source FAQ system using PHP and available for many databases. OpenVAS Vulnerability Test $Id: phpmyfaqdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ phpMyFAQ Detection Authors: Michael Meyer Updated to detect beta versions. - By Nikita MR on 2009-11-24 11:10:45...

FAQ: Conficker and April 1st

Our friends at F-Secure have put together a very valuable FAQ f-secure.com on the Conficker worm to help strip away the hype around the April 1st date. It’s a must read...

Sql injection

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script Knowledge base Script allows remote attackers to execute arbitrary SQL commands via the Password parameter aka the pass field...

CVE-2008-6525

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script Knowledge base Script allows remote attackers to execute arbitrary SQL commands via the Password parameter aka the pass field...

CVE-2008-6525

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script Knowledge base Script allows remote attackers to execute arbitrary SQL commands via the Password parameter aka the pass field...

CVE-2008-6525

The CVE CVE-2008-6525 affects the Nice PHP FAQ Script Admin Panel and is caused by an SQL injection in the Password field (pass). Remote attackers can execute arbitrary SQL commands through this input vector. Exploitation is supported by external references (e.g., Exploit-DB). No remediation deta...

Sql injection

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information...

CVE-2008-6372

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information...

CVE-2008-6372

The CVE-2008-6372 entry describes a SQL injection in Ocean12 FAQ Manager Pro 1.0. The vulnerability affects default.asp in the Cat action, where the ID parameter can be manipulated to execute arbitrary SQL commands remotely. The root cause is improper input handling leading to SQL injection. Impa...

CVE-2008-6372

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information...

4Site CMS <= 2.6 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules "Pages" module:...

Surat Diamond Blind SQL Injection

Blind sql injection found at URL: http://www.suratdiamond.com/prodcriteria.aspx Entity: matid Security Risk: It is possible to view, modify or delete database entries and tables Below are the tables found on the database admin uid username userpass 1 admin removed brochureimage Carat CartMaster...

Unfixed XSS vulnerability at www.norlandprod.com

Security researcher Mystick, has submitted on 01/02/2009 a cross-site-scripting XSS vulnerability affecting www.norlandprod.com, which at the time of submission ranked 2571907 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/02/2009. It is...

Unfixed XSS vulnerability at www.roomft.com

Security researcher SaMTHG, has submitted on 12/10/2008 a cross-site-scripting XSS vulnerability affecting www.roomft.com, which at the time of submission ranked 2360527 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is currentl...

Microsoft Security Bulletin MS08-077 - Important Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege (957175)

Microsoft Security Bulletin MS08-077 - Important Vulnerability in Microsoft Office SharePoint Server Could Cause Elevation of Privilege 957175 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability. The...

CVE-2008-5288

PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configpath parameter...