1926 matches found
pnews.txt
Admin Access Vulnerability in P-News 1.6 Url: http://www.ppopn.net It is possible to gain admin access if you possess a 'Member' account due to a flaw in the 'p-news.php' file. You can inject an entire arbitrary account, including all the fields, into the 'Name' field, which will push all the...
P-News 1.16 - Administrative Account Creation
P-News 1.16 - Administrative Account Creation source: https://www.securityfocus.com/bid/7689/info A vulnerability has been reported that could enable a P-News member to create and access an administrative account. This is due to insufficient validation of data supplied to account editing input...
P-News 1.16 - Administrative Account Creation
source: https://www.securityfocus.com/bid/7689/info A vulnerability has been reported that could enable a P-News member to create and access an administrative account. This is due to insufficient validation of data supplied to account editing input fields of P-News. This issue was reported in...
CVE-2002-1559
Directory traversal vulnerability in ion-p.exe aka ion-p allows remote attackers to read arbitrary files via 1 C: drive letter or 2 .. dot-dot sequences in the page parameter...
CVE-2002-1559
CVE-2002-1559 describes a directory traversal flaw in ion-p.exe (ion-p) allowing remote attackers to read arbitrary files via the page parameter using C: or .. sequences. The vulnerability is web-facing, with exploitation leading to information disclosure and potential privilege escalation on som...
