491 matches found
Authorization
DropAFew before 0.2.1 does not require authorization for certain privileged actions, which allows remote attackers to 1 view the logged calorie information of arbitrary users via the id parameter in editlogcal.php, 2 add arbitrary links via links.php, or 3 create arbitrary users via newaccount2.p...
CVE-2007-1179
WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to 1 the Recommend feature, Email Article 2 senders and 3 recipients, 4 New User Approval, 5 Edit Profiles, 6 the Newsletter Subscription form, 7 the Recommend form, and 8 sending of articles, which has...
Aztek Forum 4.0 - Multiple Vulnerabilities
Aztek Forum 4.0 - Multiple Vulnerabilities !/usr/bin/php Aztek Forum 4.1 Multiple Vulnerabilities Exploit header ================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435 status Trying to get database...
CVE-2006-1174
useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the...
CVE-2006-1090
register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations...
Hosting Controller 0.6.1 - User Registration (2)
Hosting Controller 0.6.1 - User Registration 2 / Hosting Controller include include include include include define PORT1 80 // port of web server define PORT...
CVE-2004-1651
CVE-2004-1651 affects the phpScheduleIt 1.0.0 RC1 registration page. The vulnerabilities are cross-site scripting (XSS) via user-supplied input in (1) Name, (2) Lastname, and (3) Schedule Name fields during new user registration. The root cause is insufficient input sanitization, enabling remote ...
phpScheduleIt < 1.0.0 New User Registration HTML Injection
Binary data 2191.prm...
Applied Watch Command Center 1.0 - Authentication Bypass (1)
Applied Watch Command Center 1.0 - Authentication Bypass 1 // source: https://www.securityfocus.com/bid/9124/info A vulnerability has been identified in the system that may allow an attacker to bypass authentication to add attacker supplied IDS alerts and new user accounts in the console...
PT-1998-1068 · Hewlett Packard · Hp-Ux Ssh
Name of the Vulnerable Software and Affected Versions: HP-UX SSH version 1.2.25 Description: The issue allows access to new user accounts on the system. Recommendations: For HP-UX SSH version 1.2.25, update to a newer version that addresses this issue to prevent unauthorized access to new user...
