CVE-2003-0162

CVE-2003-0162 affects Ecartis 1.0.0 (formerly listar) prior to the 20030227 snapshot. The vulnerability lets a remote attacker reset other users’ passwords and gain privileges by tampering with hidden HTML form fields. Debian and OpenVAS records tie this to a remote password-change flaw in ecarti...

CVE-2003-0162: Undefined Security Weakness

Ecartis 1.0.0 formerly listar before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page...

Ecardis Password Reseting Vulnerability

Hi, I don't know if someone has discovered this before but Ecartis 1.0.0 former listar contains a vulnerability that enables an attacker to reset passwords of any user defined on the list server, including the list admins. After logging on as a non-priviledged user, Ecartis enables the user to...

[VSA0306] YABBSE 1.4.1 SQL Injection Bugs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: void.at SA YaBB SE SQL Injection Bugs void.at Security Advisory VSA0306 YaBB SE is a web based forum written in PHP. Overview - -------- Due to sql injection bugs, it is possible for an remote user without an account to get access to user...

YABB 1.4.1 SE - 'Reminder.php' SQL Injection

source: https://www.securityfocus.com/bid/6591/info It has been reported that a problem exists in the Reminder.php script distributed as part of YaBB SE. Due to insufficient sanitizing of input, it is possible for a remote user to inject arbitrary SQL into the database used by YaBB SE that could ...

Reset any user's password in VBZoom forums

Name: VBZoom Version Affected: tested on v1.01 maybe other version vulnerable also Severity: Critical Category: Password reset Vendor URL: http://www.vbzoom.com Author: hishhish [email protected] Date: discloused on 28th August 2002 Published at 8th oct 2002 Description VBZooM is bulletin...

VBZoom 1.0 - SQL Injection

source: https://www.securityfocus.com/bid/5919/info A SQL injection vulnerability has been discovered in VBZoom v1.01. Due to insufficient sanitization of variables used to construct SQL queries, it is possible to modify the logic of a query, via a malicious request. Exploiting this issue could...

VBZoom 1.0 - SQL Injection

VBZoom 1.0 - SQL Injection source: https://www.securityfocus.com/bid/5919/info A SQL injection vulnerability has been discovered in VBZoom v1.01. Due to insufficient sanitization of variables used to construct SQL queries, it is possible to modify the logic of a query, via a malicious request...

CVE-2001-1040

CVE-2001-1040 affects HP LaserJet and possibly other JetDirect devices, where certain power-off behavior resets the admin password. The result is that a remote attacker could gain administrative access without a password after the device is turned off, per the available description. The provided ...

Vulnerability in all versions of DCForum from dcscripts.com

When a user requests a new password for his account, a new password is generated and sent to the requester anyone that knows the username+email information, which is usually available in "user profile". The problem is that the password is simply the first 6 characters of the user's SessionID, whi...

CVE-2001-1039: Undefined Security Weakness

The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer...

CVE-2001-1040: Undefined Security Weakness

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password...

CVE-2001-1040

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password...

ISSalert: Internet Security Systems Security Advisory: Multiple vulnerabilities in the WatchGuard SOHO Firewall

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)

// source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and password without knowing the current...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 3 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (2)

// source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and password without knowing the current...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (2)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 2 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...

slmail3.txt

Date: Fri, 4 Sep 1998 16:38:13 +0100 From: Mnemonix Subject: SL-Mail ver 3.0.2423 security Hi, I thought I'd write to advise of a security issue with SLMail version 3.0.3423. Other versions may also be affected. During the install you choose whether the passowrd is set to the account name,...

Linux imapd Remote Overflow File Retrieve Exploit

Exploit for linux platform in category remote exploits ================================================= Linux imapd Remote Overflow File Retrieve Exploit ================================================= / This is the remote exploit of the hole in the imap daemon, for Linux. The instruction code...