NotJustBrowsing 1.0.3 Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits ======================================================= NotJustBrowsing 1.0.3 Local Password Disclosure Exploit ======================================================= / NotJustBrowsing 1.0.3 Local Password Disclosure Exploit by Kozan...

[UNIX] Linbit Linbox Multiple Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Multiple Llinbit Linbox bugs

Authentication bypass, password disclosure, privilege escalation...

[SECURITY] [DSA 467-1] New ecartis packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 467-1 [email protected] http://www.debian.org/security/ Matt Zimmerman March 23rd, 2004 http://www.debian.org/security/faq -...

Multiple ecartis bugs

Buffer overflows, maillist password disclosure...

eCommerce Corporation Online Store Kit 3.0 - 'shop.php?cat' SQL Injection

source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via the URI. As a result of this a malicious user may influence database...

eCommerce Corporation Online Store Kit 3.0 - listing.php?id SQL Injection

eCommerce Corporation Online Store Kit 3.0 - listing.php?id SQL Injection source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via...

BEA WebLogic config.xml Operator/Admin Password Disclosure

The remote web server is running WebLogic. BEA WebLogic Server and WebLogic Express are reportedly may allow disclosure of Operator or Admin passwords. An attacker who has interactive access to the affected managed server may potentially exploit this issue in a timed attack to harvest credentials...

Получение доступа к панели администрирования в Willwin's Web Voting v.1.0

Получение доступа к панели администрирования в Willwin's Web Voting v.1.0 Название скрипта: Willwin's Web Voting Уязвимая версия: v.1.0 Сайт производителя: http://willwin.plex.ru Автор: [email protected] Дата: 13th December 2003 Пароль для получения доступа к панели управления голосованием в...

FuzzyMonkey 2.11 - MyClassifieds Email Variable SQL Injection

source: https://www.securityfocus.com/bid/8863/info It has been reported that FuzzyMonkey MyClassifieds may be prone to a SQL injection vulnerability that may allow an attacker to disclose user passwords by supplying malicious SQL code to the Email variable. This attack may cause the software to...

Cisco LEAP - Password Disclosure

source: https://www.securityfocus.com/bid/8755/info It has been reported that Cisco LEAP Lightweight Extensible Authentication Protocol is prone to a password disclosure weakness that may allow a remote user to steal user passwords. The issue may be exploited out by brute forcing user passwords...

Cisco LEAP - Password Disclosure

Cisco LEAP - Password Disclosure source: https://www.securityfocus.com/bid/8755/info It has been reported that Cisco LEAP Lightweight Extensible Authentication Protocol is prone to a password disclosure weakness that may allow a remote user to steal user passwords. The issue may be exploited out ...

DeskSoft CheckMail 1.2 - Password Disclosure

source: https://www.securityfocus.com/bid/8449/info It has been reported that a password disclosure issue exists in CheckMail allowing a local user to access sensitive authentication information through the Windows Registry. The software stores user authentication credentials in a Windows Registr...

DeskSoft CheckMail 1.2 - Password Disclosure

DeskSoft CheckMail 1.2 - Password Disclosure source: https://www.securityfocus.com/bid/8449/info It has been reported that a password disclosure issue exists in CheckMail allowing a local user to access sensitive authentication information through the Windows Registry. The software stores user...

phpBB password disclosure by sql injection

Hi There is sql injection vuln in phpBB. The variable "topicid" is passed directly from GET to sql query in /viewtopic.php. It can be used to get md5 passwords for users. I am attaching details and proof of concept code. I've only tested this on mysql 4 and pgsql at my home machines so I might ha...

phpBB 2.0.5 - SQL Injection Password Disclosure

!/usr/bin/perl -w phpBB password disclosure vuln. - rick patel There is a sql injection vuln which exists in /viewtopic.php file. The variable is $topicid which gets passed directly to sql server in query. Attacker could pass a special sql string which can used to see md5 password hash for any us...

phpBB 2.0.5 SQL Injection password disclosure Exploit

Exploit for unknown platform in category web applications ===================================================== phpBB 2.0.5 SQL Injection password disclosure Exploit ===================================================== !/usr/bin/perl -w phpBB password disclosure vuln. - rick patel There is a sql...

phpBB 2.0.5 SQL Injection password disclosure Exploit

No description provided by source. !/usr/bin/perl -w phpBB password disclosure vuln. - rick patel There is a sql injection vuln which exists in /viewtopic.php file. The variable is $topicid which gets passed directly to sql server in query. Attacker could pass a special sql string which can used ...

phpBB 2.0.5 - SQL Injection Password Disclosure

phpBB 2.0.5 - SQL Injection Password Disclosure !/usr/bin/perl -w phpBB password disclosure vuln. - rick patel There is a sql injection vuln which exists in /viewtopic.php file. The variable is $topicid which gets passed directly to sql server in query. Attacker could pass a special sql string...

eLDAPo index.php Plaintext Password Disclosure

The remote host is hosting eLDAPo, a PHP-based CGI suite designed to perform LDAP queries. This application stores the passwords to the LDAP server in plaintext in its source file. An attacker can read the source code of index.php and use the information contained to gain credentials on a...