91 matches found
rpgboard-sql.txt
RPG.Board = 0.0.8Beta2 Remote SQL Injection Author: 0x90 HomePage: www.0x90.com.ar Contact: Gunsat0x90dotcomdotar Script: RPG.Board site: http://rpgmaster.de/viewtopic.php?f=25&t=69 Vulnerability Class: SQL Injection Exploit: Register, login and testing exploit...
Easily bypass the PW Forum app high-risk vulnerabilities offensive and defensive explanation-vulnerability warning-the black bar safety net
Vulnerability description The PW forums have serious vulnerabilities, mainly because of the forum directory in the passportclient. php file inside the variable without initialization settings, so attackers can easily bypass those judgments. Exploit Due to the vulnerability of the program quickly...
cwmVote 1.0 - 'archive.php' Remote File Inclusion
cwmVote 1.0 File Include Vulnerability F0und3R: bd0rk || SOH-Crew Website: www.soh-crew.it.tt Download: http://explorer.cwm-design.de/dirs/41/cwmVote.rar Vulnerable Code in archive.php Code: include$abs."inc/functions.inc.php"; include$abs."inc/conf.mysql.inc.php";...
CVE-2006-5530
Multiple cross-site scripting XSS vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 admin/index.php, 2 admin/pwlost.php, and unspecified other files. NOTE: the provenance of this information is unknown;...
CVE-2005-4142: Undefined Security Weakness
The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote attackers to execute arbitrary list administration commands via LFCR %0A%0D sequences in the pw parameter. NOTE: it is not clear whether this is a variant of a...
CVE-2002-1725
phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function...
CVE-2002-1725: Undefined Security Weakness
phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function...
security flaw
Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...
FreeBSD-SA-02:02.pw
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:02 Security Advisory FreeBSD, Inc. Topic: pw8 race condition may allow disclosure of master.passwd Category: core Module: pw Announced: 2002-01-04 Credits: ryan beasley...
Network Solutions Crypt-PW Authentication-Scheme vulnerability
Problem: While crypt password authentication is not in and of itself very secure, Network Sulotions have made it even less so by including the first two characters of the password as the salt of the encrypted form. While the password is transmitted via a secure session, the encrypted form is...