7945 matches found
Cisco Unity Express Expired Password Reset Privilege Escalation
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
versatileBulletinBoard 1.00 RC2 (board takeover) SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== versatileBulletinBoard 1.00 RC2 board takeover SQL Injection Exploit ====================================================================== ?php --- versatilexpl.php 4....
Cyphor 0.19 SQL Injection / Board takeover / cross site scripting
Cyphor 0.19 SQL Injection / Board takeover / cross site scripting 1if magic quotes off - SQL Injection: by "Forgot your password?" feature you can send yourself a new admin password and reset it, poc: email: youremail nick: 'or'X'='X soon, you will receive an email like this: You have registered...
[SA17009] Macromedia Breeze Password Reset Security Issue
TITLE: Macromedia Breeze Password Reset Security Issue SECUNIA ADVISORY ID: SA17009 VERIFY ADVISORY: http://secunia.com/advisories/17009/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Macromedia Breeze 5.x http://secunia.com/product/5779/...
Macromedia Breeze information leak
"reset password" feature stores password in clear text...
CVE-2005-3101
The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...
CVE-2005-3101
The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...
CVE-2005-3101
Movable Type prior to 3.2 exposes username enumeration via the password reset feature: authentication messages differ based on user existence, enabling remote attackers to determine valid usernames. No other details provided in the connected docs.
MailGust 1.9 SQL Injection
MailGust 1.9 SQL injection / board takevor software: site: http://www.mailgust.org/ description: Mailgust is three softwares in one: Mailing list manager Newsletter distribution tool Message Board Mailgust is written in php and uses a mysql database. vulnerability: if magic quotes off - SQL...
Movable Type < 3.2 Multiple Vulnerabilities
The version of Movable Type installed on the remote host is affected by multiple vulnerabilities : - The application allows an attacker to enumerate valid usernames because its password reset functionality returns different errors depending on whether the supplied username exists. CVE-2005-3101 -...
Hosting Controller 0.6.1 - User Registration (3)
Hosting Controller 0.6.1 - User Registration 3 Username : emailaddress : firstname : milw0rm.com 2005-05-27...
Hosting Controller 0.6.1 - User Registration (3)
Username : emailaddress : firstname : milw0rm.com 2005-05-27...
Cisco Linksys WET11 wireless ethernet bridge unauthorized access
It's possible to reset device password with web interface...
IBM WebSphere Commerce ResetPassword Servlet Caching Information Disclosure
The remote host is running a version of IBM WebSphere Commerce that may allow an attacker to conduct a brute-force attack against users who have recently had their passwords invalidated in WebSphere Commerce and uncover private information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
advisory002.txt
======================================================= Multiple vulnerabilities in punbb-1.2.1 profile.php ======================================================= Description ----------- A remote attacker without an account can set the password of any user on the system to NULL, effectivley...
CVE-2004-1591
CVE-2004-1591 affects the Micronet Wireless Broadband Router SP916BM (firmware before 1.9). The web interface resets the router password to the default password when the device is shut off, potentially allowing an attacker to gain access remotely. The available documents confirm the affected prod...
exploit in PHPBB 2010
explode: form action="" method="post" URL до форума:input type="text" name="url" size="50" value="http://www.phpbbexample.ru/forum/"br Колличество запросов:select name="select" size="1" option value="10"10/option option value="100"100/option option value="200"200/option option value="500"500/opti...
Ecartis User Password Reset Privilege Escalation
Binary data 1574.prm...
[Full-Disclosure] DSL router Prestige 650HW-31
Hi, have not much time so here is the thing... There's a bug in the DSL router Prestige 650HW-31, you just post a long string as password and the router resets it self so is very easy to make a DNS to this router if people doesnt have the aproppiate filters on port 80 I didnt tried on Telnet. Thi...
cPanel fails to verify input passed to the "user" parameter
Overview A remotely exploitable vulnerability in CPanel's password reset and login scripts may allow a remote attacker to gain control of the vulnerable system. Description Cpanel is an application that provides the ability to manage accounts and provides an interface to the end users of web...