CVE-2006-5787: Undefined Security Weakness

admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwords via a direct request, possibly related to an authentication issue in admin/chkadmin.php...

trforum20.txt

!/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html Poc.link......: acid-root.new.fr/poc/10060903.txt...

Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit

No description provided by source. !/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html Poc.link......:...

How to become a ASP Trojan master-vulnerability warning-the black bar safety net

Name: how to make a picture of the ASP Trojan can display pictures Built an asp file, the content of!-- of i nclude file="ating.jpg"-- 找 一 个 正常 图片 ating.jpg, insert the word Trojan,such as the ice Fox, with ultraedit to hex compiled, insert a picture, in order to run successfully, but also to...

Unintentional Password Modification Vulnerability in Cisco Firewall Products

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

[Full-disclosure] Cisco Security Advisory: Unintentional Password Modification in Cisco Firewall Products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Unintentional Password Modification in Cisco Firewall Products Document ID: 70811 Advisory ID: cisco-sa-20060823-firewall http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml Revision 1.0 For Public Release 20...

Deserialization of untrusted data

profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action...

Default credentials

ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp...

CVE-2006-1620

The affected component is Hosting Controller 2002 RC1 (admin/accounts/AccountActions.asp). The vulnerability allows remote attackers to modify passwords for other users by abusing the Update User ActionType with a forged UserName and PassCheck=TRUE. This issue has been observed in 6.1 Hotfix 3.3 ...

CVE-2006-1620

admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE. It was later reported that the vulnerability is presen...

CVE-2006-1620: Undefined Security Weakness

admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE. It was later reported that the vulnerability is presen...

HostingController.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, i've found 2 vulnerabilities in Hosting Controller that allows remote authenticated users to change every user password or upload files in every directory. Here are the PoC: This allows to modify passwords: Username: Name: ChangePass type true:...

CVE-2004-2198

account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MMrecordId parameter on the "My Account" page...

CVE-2002-1846

YaBB vulnerable: YaBB 1.40/1.41 allows changing a user’s password without providing the correct password, by leveraging a stolen cookie and submitting a profile2 action to index.php. This lets remote attackers modify the password and adjust the expiretime setting. Root cause is insufficient authe...

CVE-2002-1846: Undefined Security Weakness

Yet Another Bulletin Board YaBB 1.40 and 1.41 does not require a user to submit the correct password before changing it to a new password, which allows remote attackers to modify passwords by stealing the cookie of another user, modifying the expiretime setting, and submitting the change in a...

POP Password Changer (poppassd_pam) Arbitrary User Remote Password Modification

The remote host is running POP Password Changer, a server to change POP user's passwords. According to the version number, the remote software is vulnerable to an unauthorized access. An attacker, exploiting this flaw, will be able to change user's password. C Tenable Network Security, Inc...

Major Cpanel Expliot HTML Injection

Major Bug found 6/7/04 Discovered by Verb0s Reseller accounts with cpanel, in the password modification page, can insert a basic injection ex:http://domain:2086/scripts/passwd?password=&domain=&user= The code will modify all the mysql database passwords, in which the reseller shouldnb't have...

Cisco IOS 12.x/11.x HTTP Remote Integer Overflow Exploit

No description provided by source. / ..--== Phenoelit ==--.. / \ | CISCO CASUM EST | .. ../ ---==MMIII==--- Cisco IOS 12.x/11.x remote exploit for HTTP integer overflow in URL using IOS 11.x UDP Echo memory leak for shellcode placing and address calculation. This code does support exploitation of...

CVE-2002-0776

CVE-2002-0776 affects Hosting Controller 2002. getuserdesc.asp lets remote attackers change arbitrary users’ passwords and gain privileges by modifying the username parameter. Root cause is input manipulation in the affected function, leading to partial confidentiality, integrity and availability...

CVE-2002-0250: Undefined Security Weakness

Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the webaccess.html file, which allows the user to change the switch's configuration and modify the...