PT-2018-18637

Name of the Vulnerable Software and Affected Versions WolfCMS version 0.8.3.1 Description The issue concerns an open redirect vulnerability in the login functionality. This vulnerability allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. The...

GoAutoDial 3.3 Authentication Bypass / Command Injection Exploit

This Metasploit module exploits a SQL injection flaw in the login functionality for GoAutoDial version 3.3-1406088000 and below, and attempts to perform command injection. This also attempts to retrieve the admin user details, including the cleartext password stored in the underlying database...

PT-2017-18695

Name of the Vulnerable Software and Affected Versions Allen Disk version 1.6 Description The issue concerns a CAPTCHA bypass in the login functionality. Specifically, the /admin/loginc.php endpoint does not properly check if the CAPTCHA code has been set, allowing for bypass by emptying the captc...

PT-2016-5485

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Software version 12.0.3 Description The issue affects confidentiality and integrity, and it is related to the Pre-Login functionality in the Oracle FLEXCUBE Direct Banking component. Recommendations For version 12.0.3...

PT-2016-4354

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Software versions 12.0.2 through 12.0.3 Description The issue affects confidentiality and integrity, and it is related to the Pre-Login functionality. Recommendations For versions 12.0.2 and 12.0.3, update to a versio...

Symfony PHP Framework Session Fixation

Advisory: Symfony PHP Framework: Session Fixation In "Remember Me" Login Functionality A session fixation vulnerability within the Symfony web application framework's "Remember Me" login functionality allows an attacker to impersonate the victim towards the web application if the session ID value...

PT-2015-4641

Name of the Vulnerable Software and Affected Versions Oracle iLearning versions 6.0 through 6.1 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to the Login functionality. Recommendations For Oracle iLearning versions 6.0 through...

CVE-2013-7137

The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burdenuserrememberme cookie to 1...

Novell Identity Manager Role Based Provisioning Module Unspecified Vulnerability

The remote web server has an install of Novell Identity Manager Role Based Provisioning Module that is affected by an unspecified vulnerability in its login functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2013-1083

Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager aka IDM Roles Based Provisioning Module 4.0.2 before Field Patch C has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager aka IDM Roles Based Provisioning Module 4.0.2 before Field Patch C has unknown impact and attack vectors...

CVE-2013-1083

Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager aka IDM Roles Based Provisioning Module 4.0.2 before Field Patch C has unknown impact and attack vectors...

PT-2013-2860

Name of the Vulnerable Software and Affected Versions Novell Identity Manager aka IDM Roles Based Provisioning Module version 4.0.2 Description The issue is related to an unspecified vulnerability in the login functionality of the Reporting Module. The impact and attack vectors of this issue are...

CVE-2013-1083: Undefined Security Weakness

Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager aka IDM Roles Based Provisioning Module 4.0.2 before Field Patch C has unknown impact and attack vectors...

Unfixed XSS vulnerability at www.blogsky.com

Security researcher a3q, has submitted on 21/01/2012 a cross-site-scripting XSS vulnerability affecting www.blogsky.com, which at the time of submission ranked 1089 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is currently...

Code injection

Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and earlier has unknown impact and attack vectors...

CVE-2006-1047

CVE-2006-1047 concerns Joomla! 1.0.7 and earlier, with an unspecified vulnerability in the Remember Me login functionality. The connected sources confirm the affected product and component, but describe the impact and attack vectors as unknown and do not provide a concrete root cause, exploit det...

CVE-2006-1047: Undefined Security Weakness

Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and earlier has unknown impact and attack vectors...