PT-2013-5590

Name of the Vulnerable Software and Affected Versions Cisco Firewall Services Module FWSM versions 3.1.x through 3.2.x before 3.225 Cisco Firewall Services Module FWSM versions 4.x before 4.113 Description The issue affects the authorization functionality when multiple-context mode is enabled,...

Amazon Linux AMI : postgresql9 (ALAS-2013-178)

Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service file corruption, and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection...

Design/Logic Flaw

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804...

PT-2013-5361

Name of the Vulnerable Software and Affected Versions Juniper Junos Space versions prior to 13.1R1.6 Description The issue is related to the improper implementation of role-based access control. This allows remote authenticated users with read-only privileges to modify the configuration...

Design/Logic Flaw

import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request...

UBUNTU-CVE-2013-4729

import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request...

CVE-2013-3512: Improper Input Validation

The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform authorization checks, which allows remote authenticated users to read or modify configuration settings via unspecified vectors, as demonstrated by reading credentials...

PT-2013-2878

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices versions 7.0 through 7.0.235.3 Cisco Wireless LAN Controller WLC devices versions 7.1 through 7.2.111.3 Cisco Wireless LAN Controller WLC devices versions 7.3 through 7.3.101.0 Description The issue...

PT-2012-2423

Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Real-Time Information Portal versions 2.6 through 3.5 Description The issue allows remote attackers to modify the configuration via crafted strings due to a directory traversal vulnerability in the Remote...

CVE-2012-0371: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709...

Default credentials

Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than...

CVE-2010-1916

The dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 and earlier, as used in Serendipity 1.5.2 and earlier, allows remote attackers to bypass intended access restrictions and modify the configuration of arbitrary plugins via 1 crafted backendconfigsecretkeylocation and...

PT-2009-5362 · Bingo! · Bingo!Cms

Name of the Vulnerable Software and Affected Versions: bingo!CMS versions 1.2 and earlier Description: A cross-site request forgery issue allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content. Recommendations: For versions 1.2...

EasyPHP 3.0 - Arbitrary Modify Configuration File

EasyPHP 3.0 - Arbitrary Modify Configuration File Bug : Arbitrary Modify Configuration File Vendor : EasyPHP Vendor URI : http://sourceforge.net/projects/quickeasyphp/ Product : EasyPHP 2.0 Author : Zigma zigmatn @ gmail.com http://NullArea.NET Description : EasyPHP is a WAMP software bundle that...

CVE-2008-6690

Unspecified vulnerability in nepa-design.de Spam Protection ndantispam extension 1.0.3 for TYPO3 allows remote attackers to modify configuration via unknown vectors...

CVE-2008-6690

Unspecified vulnerability in nepa-design.de Spam Protection ndantispam extension 1.0.3 for TYPO3 allows remote attackers to modify configuration via unknown vectors...

GreaseKit and Creammonkey allows execution of userscript functions

Overview GreaseKit and Creammonkey contains a vulnerability that can be exploited to execute functions for userscripts. GreaseKit and Creammonkey are plugins that enable user scripting to Safari and other Apple Webkit applications, and they provide APIs callable only from userscripts. GreaseKit a...

CVE-2008-0508

Cross-site request forgery CSRF vulnerability in deanspermalinksmigration.php in the Dean's Permalinks Migration 1.0 plugin for WordPress allows remote attackers to modify the oldstructure aka deanpmconfigoldstructure configuration setting as administrators via the oldstruct parameter in a...

CVE-2008-0403: Improper Authentication

The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi...

CVE-2006-5905

Web Directory Pro allows remote attackers to 1 backup the database and obtain the backup via a direct request to admin/backupdb.php or 2 modify configuration via a direct request to admin/options.php...