Design/Logic Flaw

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php...

CVE-2009-3180

CVE-2009-3180 affects Anantasoft Gazelle CMS 1.0. Remote attackers can reset passwords for other users by sending a modified user parameter to renew.php; root cause appears to be improper parameter handling in renew.php. Exploitation details are not provided in the supplied documents, and no reme...

CVE-2009-3180

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php...

PABox非授权重设用户口令漏洞

BUGTRAQ: 8067 paBox由于用户提交的输入缺少充分过滤，远程攻击者可以利用这个漏洞重设管理员的用户名和密码。 重设管理员用户名和密码就可以未授权控制应用程序。 paBox 1.6 厂商补丁： PHP Arena --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.phparena.net/pabox.php...

Authentication flaw

OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct request with the update parameter set to 1 and modified user and password parameters...

CVE-2008-7066

OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct request with the update parameter set to 1 and modified user and password parameters...

CVE-2008-7066

OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct request with the update parameter set to 1 and modified user and password parameters...

2WIRE Gateway - Authentication Bypass Password Reset (2)

2WIRE Gateway - Authentication Bypass Password Reset 2 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET - Part 2 08/15/09 DESCRIPTION ----------------- Additional to the authentication bypass exploit page submitted by hkm. EXPLOIT/POC ----------------- Authentication Bypass - just use this pa...

2WIRE Gateway (Auth Bypass & Password Reset) Vulnerabilities #2

No description provided by source. 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET - Part 2 08/15/09 DESCRIPTION ----------------- Additional to the authentication bypass exploit page submitted by hkm. EXPLOIT/POC ----------------- Authentication Bypass - just use this page to set a new...

2WIRE Gateway (Auth Bypass & Password Reset) Vulnerabilities #2

Exploit for unknown platform in category web applications =============================================================== 2WIRE Gateway Auth Bypass & Password Reset Vulnerabilities 2 =============================================================== 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RES...

2WIRE Gateway - Authentication Bypass / Password Reset (2)

2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET - Part 2 08/15/09 DESCRIPTION ----------------- Additional to the authentication bypass exploit page submitted by hkm. EXPLOIT/POC ----------------- Authentication Bypass - just use this page to set a new password...

CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

DEBIAN-CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

CVE-2008-6971

The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...

Code injection

The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...

CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

Design/Logic Flaw

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

CVE-2008-6971

CVE-2008-6971 describes a by-design weakness in Simple Machines Forum (SMF) where password reset codes are generated using an insecure random-number state exposed in a hidden form field. A remote attacker could predict validation codes for the password reset, enabling modification of other users’...