4989 matches found
CVE-1999-0394
DPEC Online Courseware allows an attacker to change another user's password without knowing the original password...
Phorum 3.0.7 - 'admin.php3' Unverified Administrative Password Change
source: https://www.securityfocus.com/bid/2271/info Phorum is a popular, free, open source software package originally written by Brian Moon. The package is designed to add chat/bulletin board style interaction between visitors of a web site. A problem with Phorum can allow remote users access to...
dpec-course-passwds.txt
Date: Fri, 15 Jan 1999 21:45:24 -0700 From: Joel Knight To: [email protected] Subject: DPEC Online Courseware DPEC's www.dpec.com Online Courseware has a nasty bug in it that allows anyone to change anyone elses password without knowing what their current password is. This is NOT limited to...
anyboard.forum.passwd.txt
Date: Sat, 24 Apr 1999 03:55:39 +0200 From: "Bluefish @ home" To: [email protected] Subject: Anyboard www.netbula.com problem's publicly discussed in eurohack Draz Q published a short summary of problems with a webrelated software in eurohack. Basicly it sounds pretty much like a common CGI...
iis4.proxy.passwd.txt
Date: Mon, 9 Feb 1998 04:35:48 -0000 From: mnemonix To: [email protected] Subject: ALERT: IIS4 allows proxied password attacks over NetBIOS Introduction Internet Information Server 4.0 has an interesting feature that can allow a remote attacker to attack user accounts local to the Web Server a...
iusr_bug.txt
Internet User Bug Security Hole -kon. I've recently found a bug in NT 4 Server w/ IIS that allows the internet user IUSRCOMPUTER to change any user's password, including the administrators, leading to total server compromise. How it's done: The attacker must have access to the NT Server's web...
CVE-1999-0394
DPEC Online Courseware allows an attacker to change another user's password without knowing the original password...
PT-1999-1080 · Dpec · Dpec Online Courseware
Name of the Vulnerable Software and Affected Versions: DPEC Online Courseware affected versions not specified Description: The issue allows an attacker to change another user's password without knowing the original password. Recommendations: At the moment, there is no information about a newer...
